Microsoft Windows 11 Version 26H1 vulnerabilities
741 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
741
CISA KEV
6
actively exploited
Public exploits
6
Exploited in wild
9
Severity breakdown
CRITICAL23HIGH567MEDIUM146LOW5
Vulnerabilities
Page 29 of 38
CVE-2026-58619P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-58619 [HIGH] CWE-416 CVE-2026-58619: Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges lo
Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42825P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-42825 [HIGH] CWE-416 CVE-2026-42825: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-48571P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-48571 [HIGH] CWE-416 CVE-2026-48571: Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34345P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-34345 [HIGH] CWE-362 CVE-2026-34345: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-35418P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-35418 [HIGH] CWE-367 CVE-2026-35418: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32083P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32083 [HIGH] CWE-362 CVE-2026-32083: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32082P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32082 [HIGH] CWE-362 CVE-2026-32082: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42836P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-42836 [HIGH] CWE-362 CVE-2026-42836: Concurrent execution using shared resource with improper synchronization ('race condition') in Funct
Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27918P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27918 [HIGH] CWE-362 CVE-2026-27918: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27927P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27927 [HIGH] CWE-362 CVE-2026-27927: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Projected File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33839P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-33839 [HIGH] CWE-362 CVE-2026-33839: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34331P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-34331 [HIGH] CWE-362 CVE-2026-34331: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58598P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.25252026-07-16
CVE-2026-58598 [HIGH] CWE-362 CVE-2026-58598: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45597P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-45597 [HIGH] CWE-362 CVE-2026-45597: Concurrent execution using shared resource with improper synchronization ('race condition') in UI Au
Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26174P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26174 [HIGH] CWE-362 CVE-2026-26174: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27926P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27926 [HIGH] CWE-362 CVE-2026-27926: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32219P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32219 [HIGH] CWE-362 CVE-2026-32219: Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges l
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33100P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-33100 [HIGH] CWE-416 CVE-2026-33100: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26169P3MEDIUMCVSS 6.1≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26169 [MEDIUM] CWE-126 CVE-2026-26169: Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information loca
Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.
nvd
CVE-2026-48572P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.22692026-07-14
CVE-2026-48572 [HIGH] CWE-362 CVE-2026-48572: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally.
nvd