Microsoft Windows 11 Version 26H1 vulnerabilities
2,564 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
2,564
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL97HIGH1899MEDIUM563LOW5
Vulnerabilities
Page 113 of 129
CVE-2026-72966P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-72966 [MEDIUM] CWE-862 CVE-2026-72966: Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to p
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-96316P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-96316 [MEDIUM] CWE-862 CVE-2026-96316: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-96855P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-96855 [MEDIUM] CWE-862 CVE-2026-96855: Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to p
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-96311P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-96311 [MEDIUM] CWE-862 CVE-2026-96311: Improper authorization in Windows Network List Service allows an authorized attacker to perform tamp
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-84011P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-84011 [MEDIUM] CWE-863 CVE-2026-84011: Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security fea
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-69474P4MEDIUMCVSS 4.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69474 [MEDIUM] CWE-126 CVE-2026-69474: Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-69384P4HIGHCVSS 7.1≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69384 [HIGH] CWE-476 CVE-2026-69384: Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
nvd
CVE-2026-40401P4HIGHCVSS 7.1≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-40401 [HIGH] CWE-476 CVE-2026-40401: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.
cvelistv5nvd
CVE-2026-83713P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83713 [MEDIUM] CWE-497 CVE-2026-83713: Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83773P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83773 [MEDIUM] CWE-497 CVE-2026-83773: Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service M
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70232P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70232 [MEDIUM] CWE-497 CVE-2026-70232: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70199P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70199 [MEDIUM] CWE-497 CVE-2026-70199: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-108462P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-108462 [MEDIUM] CWE-497 CVE-2026-108462: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-25180P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.17192026-03-10
CVE-2026-25180 [MEDIUM] CWE-125 CVE-2026-25180: Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose infor
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-25186P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.17192026-03-10
CVE-2026-25186 [MEDIUM] CWE-200 CVE-2026-25186: Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (
Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83893P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83893 [MEDIUM] CWE-497 CVE-2026-83893: Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96948P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-96948 [MEDIUM] CWE-497 CVE-2026-96948: Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (cs
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69315P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69315 [MEDIUM] CWE-497 CVE-2026-69315: Exposure of sensitive system information to an unauthorized control sphere in Windows License Manage
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69862P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69862 [MEDIUM] CWE-125 CVE-2026-69862: Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to di
Out-of-bounds read in Windows Wireless Wide Area Network Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-73008P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-73008 [MEDIUM] CWE-359 CVE-2026-73008: Exposure of private personal information to an unauthorized actor in Windows Biometric Service allow
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally.
nvd