Microsoft Windows 11 Version 26H1 vulnerabilities
2,562 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
2,562
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL97HIGH1897MEDIUM563LOW5
Vulnerabilities
Page 125 of 129
CVE-2026-32079P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32079 [MEDIUM] CWE-200 CVE-2026-32079: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-44814P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-44814 [MEDIUM] CWE-122 CVE-2026-44814: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-34346P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-34346 [MEDIUM] CWE-319 CVE-2026-34346: Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock all
Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83798P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83798 [MEDIUM] CWE-20 CVE-2026-83798: Improper verification of cryptographic signature in Windows Update Stack allows an authorized attack
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
nvd
CVE-2026-21249P4LOWCVSS 3.3≥ 10.0.28000.0, < 10.0.28000.15752026-02-10
CVE-2026-21249 [LOW] CWE-73 CVE-2026-21249: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally.
nvd
CVE-2026-83672P4MEDIUMCVSS 4.7≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83672 [MEDIUM] CWE-497 CVE-2026-83672: Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allo
Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-27931P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27931 [MEDIUM] CWE-125 CVE-2026-27931: Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-69684P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69684 [MEDIUM] CWE-209 CVE-2026-69684: Generation of error message containing sensitive information in Windows Error Reporting allows an au
Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.
nvd
CVE-2026-68873P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-68873 [MEDIUM] CWE-532 CVE-2026-68873: Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50431P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50431 [MEDIUM] CWE-200 CVE-2026-50431: Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability
Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability
nvd
CVE-2026-32218P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32218 [MEDIUM] CWE-532 CVE-2026-32218: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32215P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32215 [MEDIUM] CWE-532 CVE-2026-32215: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32217P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32217 [MEDIUM] CWE-532 CVE-2026-32217: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-27930P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27930 [MEDIUM] CWE-125 CVE-2026-27930: Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-42915P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-42915 [MEDIUM] CWE-131 CVE-2026-42915: Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny servi
Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally.
nvd
CVE-2026-61928P4MEDIUMCVSS 5.5≥ 10.0.28000.0, < 10.0.28000.27042026-08-11
CVE-2026-61928 [MEDIUM] CWE-312 CVE-2026-61928: Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-83774P4MEDIUMCVSS 4.7≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83774 [MEDIUM] CWE-497 CVE-2026-83774: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83905P4MEDIUMCVSS 4.7≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83905 [MEDIUM] CWE-497 CVE-2026-83905: Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows a
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83897P4MEDIUMCVSS 4.7≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83897 [MEDIUM] CWE-497 CVE-2026-83897: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70077P4MEDIUMCVSS 4.7≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70077 [MEDIUM] CWE-416 CVE-2026-70077: Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
Use after free in Windows Kernel allows an authorized attacker to disclose information locally.
nvd