Microsoft Windows 11 Version 26H1 vulnerabilities
2,562 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
2,562
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL97HIGH1897MEDIUM563LOW5
Vulnerabilities
Page 121 of 129
CVE-2026-88162P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-88162 [MEDIUM] CWE-863 CVE-2026-88162: Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perf
Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-58638P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-58638 [MEDIUM] CWE-325 CVE-2026-58638: Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security
Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-32214P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32214 [MEDIUM] CWE-284 CVE-2026-32214: Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to discl
Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-45655P4MEDIUMCVSS 5.3≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-45655 [MEDIUM] CWE-693 CVE-2026-45655: Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a securi
Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-69771P4MEDIUMCVSS 4.7≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69771 [MEDIUM] CWE-59 CVE-2026-69771: Improper link resolution before file access ('link following') in Windows Container Manager Service
Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-83656P4MEDIUMCVSS 4.7≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83656 [MEDIUM] CWE-306 CVE-2026-83656: Missing authentication for critical function in Windows Modern Device Management (MDM) allows an aut
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-83636P4MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83636 [MEDIUM] CWE-476 CVE-2026-83636: Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
nvd
CVE-2026-70248P4MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70248 [MEDIUM] CWE-476 CVE-2026-70248: Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
nvd
CVE-2026-70277P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70277 [MEDIUM] CWE-125 CVE-2026-70277: Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose informatio
Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-96865P4MEDIUMCVSS 5.6≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-96865 [MEDIUM] CWE-497 CVE-2026-96865: Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69294P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69294 [MEDIUM] CWE-209 CVE-2026-69294: Generation of error message containing sensitive information in Microsoft COM for Windows allows an
Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
nvd
CVE-2026-69339P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69339 [MEDIUM] CWE-497 CVE-2026-69339: Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service M
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68842P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-68842 [MEDIUM] CWE-497 CVE-2026-68842: Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service M
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50434P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50434 [MEDIUM] CWE-200 CVE-2026-50434: Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an a
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50334P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50334 [MEDIUM] CWE-200 CVE-2026-50334: Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authori
Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50339P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50339 [MEDIUM] CWE-200 CVE-2026-50339: Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an a
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.
nvd
CVE-2026-33842P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-33842 [MEDIUM] CWE-200 CVE-2026-33842: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-34349P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-34349 [MEDIUM] CWE-200 CVE-2026-34349: Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized att
Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50394P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50394 [MEDIUM] CWE-200 CVE-2026-50394: Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized att
Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50316P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50316 [MEDIUM] CWE-532 CVE-2026-50316: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
nvd