Microsoft Windows 11 Version 26H1 vulnerabilities
741 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
741
CISA KEV
6
actively exploited
Public exploits
6
Exploited in wild
9
Severity breakdown
CRITICAL23HIGH567MEDIUM146LOW5
Vulnerabilities
Page 5 of 38
CVE-2026-40415P3HIGHCVSS 8.1≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-40415 [HIGH] CWE-416 CVE-2026-40415: Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-45635P3HIGHCVSS 8.1≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-45635 [HIGH] CWE-843 CVE-2026-45635: Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll)
Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-45599P3HIGHCVSS 8.1≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-45599 [HIGH] CWE-416 CVE-2026-45599: Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code
Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-33829P4MEDIUMCVSS 4.3PoC≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-33829 [MEDIUM] CWE-200 CVE-2026-33829: Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauth
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-24289P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.17192026-03-10
CVE-2026-24289 [HIGH] CWE-416 CVE-2026-24289: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50460P3HIGHCVSS 8.1≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50460 [HIGH] CWE-362 CVE-2026-50460: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-58531P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-58531 [HIGH] CWE-362 CVE-2026-58531: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-49170P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-49170 [HIGH] CWE-285 CVE-2026-49170: Insufficient granularity of access control in Windows StateRepository API allows an authorized attac
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42989P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-42989 [HIGH] CWE-59 CVE-2026-42989: Improper link resolution before file access ('link following') in Winlogon allows an authorized atta
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42900P3HIGHCVSS 8.1≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-42900 [HIGH] CWE-362 CVE-2026-42900: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-50348P3HIGHCVSS 8.1≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50348 [HIGH] CWE-362 CVE-2026-50348: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-50452P3HIGHCVSS 8.1≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50452 [HIGH] CWE-362 CVE-2026-50452: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-58608P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-58608 [HIGH] CWE-362 CVE-2026-58608: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.
nvd
CVE-2026-32162P3HIGHCVSS 8.4≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32162 [HIGH] CWE-349 CVE-2026-32162: Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized atta
Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-50343P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50343 [HIGH] CWE-269 CVE-2026-50343: Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate
Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21238P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.15752026-02-10
CVE-2026-21238 [HIGH] CWE-284 CVE-2026-21238: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attack
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50509P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50509 [HIGH] CWE-502 CVE-2026-50509: Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized
Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50382P3HIGHCVSS 8.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50382 [HIGH] CWE-822 CVE-2026-50382: Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code local
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.
nvd
CVE-2026-27914P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27914 [HIGH] CWE-284 CVE-2026-27914: Improper access control in Microsoft Management Console allows an authorized attacker to elevate pri
Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26132P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.17192026-03-10
CVE-2026-26132 [HIGH] CWE-416 CVE-2026-26132: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd