cbcvebase.

Microsoft Windows 11 Version 26H1 vulnerabilities

2,571 known vulnerabilities affecting microsoft/windows_11_version_26h1.

Total CVEs
2,571
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL93HIGH1902MEDIUM571LOW5

Vulnerabilities

Page 20 of 129
CVE-2026-70286P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70286 [HIGH] CWE-122 CVE-2026-70286: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83867P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83867 [HIGH] CWE-122 CVE-2026-83867: Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85901P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85901 [HIGH] CWE-122 CVE-2026-85901: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70255P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70255 [HIGH] CWE-122 CVE-2026-70255: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70010P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70010 [HIGH] CWE-122 CVE-2026-70010: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70138P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70138 [HIGH] CWE-122 CVE-2026-70138: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70059P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70059 [HIGH] CWE-122 CVE-2026-70059: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69471P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-69471 [HIGH] CWE-122 CVE-2026-69471: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-108130P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-108130 [HIGH] CWE-122 CVE-2026-108130: Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authoriz Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83709P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83709 [HIGH] CWE-122 CVE-2026-83709: Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83678P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83678 [HIGH] CWE-122 CVE-2026-83678: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83779P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83779 [HIGH] CWE-122 CVE-2026-83779: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83757P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83757 [HIGH] CWE-122 CVE-2026-83757: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83828P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83828 [HIGH] CWE-122 CVE-2026-83828: Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate p Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83652P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83652 [HIGH] CWE-122 CVE-2026-83652: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83691P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83691 [HIGH] CWE-122 CVE-2026-83691: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49789P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-49789 [HIGH] CWE-121 CVE-2026-49789: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83861P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83861 [HIGH] CWE-122 CVE-2026-83861: Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to eleva Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69284P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69284 [HIGH] CWE-122 CVE-2026-69284: Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71337P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-71337 [HIGH] CWE-121 CVE-2026-71337: Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
nvd
Microsoft Windows 11 Version 26H1 vulnerabilities | cvebase