Microsoft Windows 11 Version 26H1 vulnerabilities
2,571 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
2,571
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL93HIGH1902MEDIUM571LOW5
Vulnerabilities
Page 43 of 129
CVE-2026-48574P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-48574 [HIGH] CWE-122 CVE-2026-48574: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-83769P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83769 [HIGH] CWE-416 CVE-2026-83769: Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73027P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-73027 [HIGH] CWE-15 CVE-2026-73027: External control of system or configuration setting in Windows Setup Files Cleanup allows an authori
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70151P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70151 [HIGH] CWE-416 CVE-2026-70151: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83732P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83732 [HIGH] CWE-416 CVE-2026-83732: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83913P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83913 [HIGH] CWE-416 CVE-2026-83913: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83690P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83690 [HIGH] CWE-416 CVE-2026-83690: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49791P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-49791 [HIGH] CWE-59 CVE-2026-49791: Improper link resolution before file access ('link following') in Windows Routing and Remote Access
Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83876P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83876 [HIGH] CWE-416 CVE-2026-83876: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70023P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70023 [HIGH] CWE-416 CVE-2026-70023: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83883P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83883 [HIGH] CWE-416 CVE-2026-83883: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83677P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83677 [HIGH] CWE-401 CVE-2026-83677: Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized att
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-85945P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85945 [HIGH] CWE-416 CVE-2026-85945: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83700P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83700 [HIGH] CWE-416 CVE-2026-83700: Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privi
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88134P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-88134 [HIGH] CWE-416 CVE-2026-88134: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83712P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83712 [HIGH] CWE-787 CVE-2026-83712: Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-83762P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83762 [HIGH] CWE-416 CVE-2026-83762: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87694P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-87694 [HIGH] CWE-416 CVE-2026-87694: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83721P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83721 [HIGH] CWE-416 CVE-2026-83721: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70218P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70218 [HIGH] CWE-285 CVE-2026-70218: Insufficient granularity of access control in Windows StateRepository API allows an authorized attac
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
nvd