Microsoft Windows 11 Version 26H1 vulnerabilities
2,567 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
2,567
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL97HIGH1901MEDIUM564LOW5
Vulnerabilities
Page 111 of 129
CVE-2026-68886P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-68886 [MEDIUM] CWE-209 CVE-2026-68886: Use after free in Windows Network Connection Broker allows an authorized attacker to disclose inform
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85910P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85910 [MEDIUM] CWE-126 CVE-2026-85910: Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose informatio
Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68843P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-68843 [MEDIUM] CWE-416 CVE-2026-68843: Use after free in Microsoft Office Word allows an authorized attacker to disclose information locall
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70137P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70137 [MEDIUM] CWE-306 CVE-2026-70137: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69554P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69554 [MEDIUM] CWE-306 CVE-2026-69554: Missing authentication for critical function in Microsoft Windows Search Component allows an authori
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-42914P4MEDIUMCVSS 5.3≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-42914 [MEDIUM] CWE-125 CVE-2026-42914: Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.
cvelistv5nvd
CVE-2026-45595P4MEDIUMCVSS 5.4≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-45595 [MEDIUM] CWE-693 CVE-2026-45595: Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to by
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-45608P4MEDIUMCVSS 6.8≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-45608 [MEDIUM] CWE-125 CVE-2026-45608: Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information lo
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-49807P4MEDIUMCVSS 6.2≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-49807 [MEDIUM] CWE-200 CVE-2026-49807: Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized
Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50294P4MEDIUMCVSS 6.2≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50294 [MEDIUM] CWE-497 CVE-2026-50294: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-50485P4MEDIUMCVSS 5.7≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50485 [MEDIUM] CWE-126 CVE-2026-50485: Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent n
Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2026-83907P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83907 [MEDIUM] CWE-497 CVE-2026-83907: Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows a
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69644P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-69644 [MEDIUM] CWE-497 CVE-2026-69644: Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows a
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32088P4MEDIUMCVSS 5.7≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32088 [MEDIUM] CWE-362 CVE-2026-32088: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Biometric Service allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-72980P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-72980 [MEDIUM] CWE-427 CVE-2026-72980: Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-68831P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-68831 [MEDIUM] CWE-552 CVE-2026-68831: Files or directories accessible to external parties in Windows Defender Firewall Service allows an a
Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62687P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-62687 [MEDIUM] CWE-59 CVE-2026-62687: Improper link resolution before file access ('link following') in Windows Backup Engine allows an au
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83507P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83507 [MEDIUM] CWE-59 CVE-2026-83507: Improper link resolution before file access ('link following') in Windows Update Orchestrator Servic
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83933P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83933 [MEDIUM] CWE-59 CVE-2026-83933: Improper link resolution before file access ('link following') in Windows Update Orchestrator Servic
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69351P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69351 [MEDIUM] CWE-359 CVE-2026-69351: Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play
Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
nvd