Microsoft Windows 11 Version 26H1 vulnerabilities
182 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
182
CISA KEV
5
actively exploited
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH145MEDIUM35LOW1
Vulnerabilities
Page 1 of 10
CVE-2026-33824CRITICALCVSS 9.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-33824 [CRITICAL] CWE-415 CVE-2026-33824: Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
cvelistv5nvd
CVE-2026-32183HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32183 [HIGH] CWE-77 CVE-2026-32183: Improper neutralization of special elements used in a command ('command injection') in Windows Snipp
Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.
cvelistv5nvd
CVE-2026-26181HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26181 [HIGH] CWE-362 CVE-2026-26181: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-25184HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-25184 [HIGH] CWE-362 CVE-2026-25184: Concurrent execution using shared resource with improper synchronization ('race condition') in Applo
Concurrent execution using shared resource with improper synchronization ('race condition') in Applocker Filter Driver (applockerfltr.sys) allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-27919HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27919 [HIGH] CWE-822 CVE-2026-27919: Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an author
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-26177HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26177 [HIGH] CWE-416 CVE-2026-26177: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32070HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32070 [HIGH] CWE-416 CVE-2026-32070: Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-27917HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27917 [HIGH] CWE-416 CVE-2026-27917: Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized atta
Use after free in Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32164HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32164 [HIGH] CWE-362 CVE-2026-32164: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32149HIGHCVSS 7.3≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32149 [HIGH] CWE-20 CVE-2026-32149: Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.
cvelistv5nvd
CVE-2026-26179HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26179 [HIGH] CWE-415 CVE-2026-26179: Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-33100HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-33100 [HIGH] CWE-416 CVE-2026-33100: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-26163HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26163 [HIGH] CWE-415 CVE-2026-26163: Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-26152HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26152 [HIGH] CWE-922 CVE-2026-26152: Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized att
Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32068HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32068 [HIGH] CWE-362 CVE-2026-32068: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-27927HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27927 [HIGH] CWE-362 CVE-2026-27927: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32219HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32219 [HIGH] CWE-362 CVE-2026-32219: Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges l
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-26167HIGHCVSS 8.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26167 [HIGH] CWE-362 CVE-2026-26167: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32082HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32082 [HIGH] CWE-362 CVE-2026-32082: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2026-32090HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32090 [HIGH] CWE-362 CVE-2026-32090: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
1 / 10Next →