Microsoft Windows 11 Version 26H1 vulnerabilities
2,571 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
2,571
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL93HIGH1902MEDIUM571LOW5
Vulnerabilities
Page 27 of 129
CVE-2026-72991P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-72991 [HIGH] CWE-122 CVE-2026-72991: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72994P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-72994 [HIGH] CWE-20 CVE-2026-72994: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69352P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69352 [HIGH] CWE-20 CVE-2026-69352: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72995P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-72995 [HIGH] CWE-122 CVE-2026-72995: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69787P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69787 [HIGH] CWE-122 CVE-2026-69787: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-78448P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-78448 [HIGH] CWE-122 CVE-2026-78448: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69508P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69508 [HIGH] CWE-121 CVE-2026-69508: Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72992P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-72992 [HIGH] CWE-122 CVE-2026-72992: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83980P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-83980 [HIGH] CWE-122 CVE-2026-83980: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69801P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69801 [HIGH] CWE-122 CVE-2026-69801: Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73001P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-73001 [HIGH] CWE-122 CVE-2026-73001: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69489P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69489 [HIGH] CWE-122 CVE-2026-69489: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71334P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-71334 [HIGH] CWE-122 CVE-2026-71334: Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83982P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-83982 [HIGH] CWE-122 CVE-2026-83982: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70289P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-70289 [HIGH] CWE-122 CVE-2026-70289: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83977P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-83977 [HIGH] CWE-122 CVE-2026-83977: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72993P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-72993 [HIGH] CWE-122 CVE-2026-72993: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83971P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-83971 [HIGH] CWE-122 CVE-2026-83971: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72997P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-72997 [HIGH] CWE-122 CVE-2026-72997: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83985P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-83985 [HIGH] CWE-122 CVE-2026-83985: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd