Microsoft Windows 11 Version 26H1 vulnerabilities
2,562 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
2,562
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL97HIGH1897MEDIUM563LOW5
Vulnerabilities
Page 114 of 129
CVE-2026-70090P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70090 [MEDIUM] CWE-908 CVE-2026-70090: Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose informat
Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70284P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70284 [MEDIUM] CWE-908 CVE-2026-70284: Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70293P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70293 [MEDIUM] CWE-908 CVE-2026-70293: Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-102187P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-102187 [MEDIUM] CWE-908 CVE-2026-102187: Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose informatio
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83714P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83714 [MEDIUM] CWE-908 CVE-2026-83714: Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose informat
Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.
nvd
CVE-2026-49180P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-49180 [MEDIUM] CWE-59 CVE-2026-49180: Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll)
Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-49177P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-49177 [MEDIUM] CWE-125 CVE-2026-49177: Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96925P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-96925 [MEDIUM] CWE-191 CVE-2026-96925: Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose inf
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83794P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83794 [MEDIUM] CWE-125 CVE-2026-83794: Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose i
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69794P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69794 [MEDIUM] CWE-126 CVE-2026-69794: Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose i
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69288P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69288 [MEDIUM] CWE-908 CVE-2026-69288: Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
nvd
CVE-2026-61347P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.27042026-08-11
CVE-2026-61347 [MEDIUM] CWE-126 CVE-2026-61347: Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose informat
Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62746P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.27042026-08-11
CVE-2026-62746 [MEDIUM] CWE-126 CVE-2026-62746: Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62793P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.27042026-08-11
CVE-2026-62793 [MEDIUM] CWE-126 CVE-2026-62793: Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50383P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50383 [MEDIUM] CWE-126 CVE-2026-50383: Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose infor
Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50381P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50381 [MEDIUM] CWE-843 CVE-2026-50381: Access of resource using incompatible type ('type confusion') in Composite Image File System Driver
Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50341P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50341 [MEDIUM] CWE-126 CVE-2026-50341: Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-58614P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-58614 [MEDIUM] CWE-125 CVE-2026-58614: Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature loca
Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-69971P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-69971 [MEDIUM] CWE-863 CVE-2026-69971: Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose inf
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85794P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85794 [MEDIUM] CWE-125 CVE-2026-85794: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.
nvd