Microsoft Windows 11 Version 26H1 vulnerabilities
2,567 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
2,567
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL97HIGH1901MEDIUM564LOW5
Vulnerabilities
Page 112 of 129
CVE-2026-83565P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83565 [MEDIUM] CWE-126 CVE-2026-83565: Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose i
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70041P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70041 [MEDIUM] CWE-126 CVE-2026-70041: Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information loca
Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69954P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-69954 [MEDIUM] CWE-126 CVE-2026-69954: Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85916P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85916 [MEDIUM] CWE-359 CVE-2026-85916: Exposure of private personal information to an unauthorized actor in Azure Active Directory allows a
Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-70234P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70234 [MEDIUM] CWE-126 CVE-2026-70234: Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information loc
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83719P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83719 [MEDIUM] CWE-126 CVE-2026-83719: Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information lo
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83664P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83664 [MEDIUM] CWE-843 CVE-2026-83664: Access of resource using incompatible type ('type confusion') in Windows Portable Device File System
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68851P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-68851 [MEDIUM] CWE-126 CVE-2026-68851: Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85835P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85835 [MEDIUM] CWE-126 CVE-2026-85835: Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information lo
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85935P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85935 [MEDIUM] CWE-126 CVE-2026-85935: Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70280P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70280 [MEDIUM] CWE-863 CVE-2026-70280: Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-69979P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-69979 [MEDIUM] CWE-424 CVE-2026-69979: Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attack
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-96183P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-96183 [MEDIUM] CWE-306 CVE-2026-96183: Missing authentication for critical function in Windows Health and Optimized Experiences Service all
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83864P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83864 [MEDIUM] CWE-290 CVE-2026-83864: Improper access control in Windows NTFS allows an authorized attacker to disclose information locall
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96854P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-96854 [MEDIUM] CWE-843 CVE-2026-96854: Access of resource using incompatible type ('type confusion') in Windows Device Association Service
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68830P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-68830 [MEDIUM] CWE-59 CVE-2026-68830: Improper link resolution before file access ('link following') in Windows Universal Plug and Play (U
Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose information locally.
nvd
CVE-2026-58545P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-58545 [MEDIUM] CWE-284 CVE-2026-58545: Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature
Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-81964P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-81964 [MEDIUM] CWE-798 CVE-2026-81964: Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker t
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-70216P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70216 [MEDIUM] CWE-1220 CVE-2026-70216: Insufficient granularity of access control in Windows Mobile Device Management allows an authorized
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-83854P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83854 [MEDIUM] CWE-306 CVE-2026-83854: Improper access control in Windows Notification allows an authorized attacker to disclose informatio
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
nvd