Microsoft Windows 11 Version 26H1 vulnerabilities

741 known vulnerabilities affecting microsoft/windows_11_version_26h1.

Total CVEs

741

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL23HIGH567MEDIUM146LOW5

Vulnerabilities

SortPage 15 of 38

CVE-2026-50490P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50490 [HIGH] CWE-416 CVE-2026-50490: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-56187P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-56187 [HIGH] CWE-416 CVE-2026-56187: Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges lo Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-49167P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-49167 [HIGH] CWE-416 CVE-2026-49167: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50413P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50413 [HIGH] CWE-416 CVE-2026-50413: Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50486P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50486 [HIGH] CWE-416 CVE-2026-50486: Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50306P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50306 [HIGH] CWE-190 CVE-2026-50306: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-49166P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-49166 [HIGH] CWE-416 CVE-2026-49166: Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges loca Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-49173P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-49173 [HIGH] CWE-416 CVE-2026-49173: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50689P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50689 [HIGH] CWE-362 CVE-2026-50689: Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges local Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26181P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14

CVE-2026-26181 [HIGH] CWE-362 CVE-2026-26181: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-54129P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-54129 [HIGH] CWE-416 CVE-2026-54129: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50307P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50307 [HIGH] CWE-416 CVE-2026-50307: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50458P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50458 [HIGH] CWE-362 CVE-2026-50458: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50305P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50305 [HIGH] CWE-362 CVE-2026-50305: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-44806P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-44806 [HIGH] CWE-401 CVE-2026-44806: Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unaut Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-49788P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-49788 [HIGH] CWE-770 CVE-2026-49788: Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to de Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-50470P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50470 [HIGH] CWE-125 CVE-2026-50470: Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-50415P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14

CVE-2026-50415 [HIGH] CWE-200 CVE-2026-50415: Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized a Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-20846P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.15752026-02-10

CVE-2026-20846 [HIGH] CWE-126 CVE-2026-20846: Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network. Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-33096P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.18362026-04-14

CVE-2026-33096 [HIGH] CWE-125 CVE-2026-33096: Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a networ Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.

nvd

← Previous15 / 38Next →