cbcvebase.

Microsoft Windows 11 Version 26H1 vulnerabilities

2,567 known vulnerabilities affecting microsoft/windows_11_version_26h1.

Total CVEs
2,567
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL96HIGH1900MEDIUM566LOW5

Vulnerabilities

Page 53 of 129
CVE-2026-50311P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50311 [HIGH] CWE-284 CVE-2026-50311: Improper access control in Windows Server allows an authorized attacker to elevate privileges locall Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58540P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-58540 [HIGH] CWE-285 CVE-2026-58540: Improper authorization in Windows Installer allows an authorized attacker to elevate privileges loca Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50405P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50405 [HIGH] CWE-1220 CVE-2026-50405: Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40408P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-40408 [HIGH] CWE-416 CVE-2026-40408: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27915P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-27915 [HIGH] CWE-416 CVE-2026-27915: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26162P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26162 [HIGH] CWE-843 CVE-2026-26162: Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized at Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26163P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-26163 [HIGH] CWE-415 CVE-2026-26163: Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85872P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85872 [HIGH] CWE-416 CVE-2026-85872: Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges loc Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85376P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85376 [HIGH] CWE-1390 CVE-2026-85376: Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate pri Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50358P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50358 [HIGH] CWE-416 CVE-2026-50358: Use after free in Windows Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50393P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50393 [HIGH] CWE-416 CVE-2026-50393: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50476P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50476 [HIGH] CWE-416 CVE-2026-50476: Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50396P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50396 [HIGH] CWE-416 CVE-2026-50396: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-57093P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-57093 [HIGH] CWE-416 CVE-2026-57093: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-56187P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-56187 [HIGH] CWE-416 CVE-2026-56187: Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges lo Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50470P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50470 [HIGH] CWE-125 CVE-2026-50470: Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-88073P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-88073 [HIGH] CWE-416 CVE-2026-88073: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69392P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69392 [HIGH] CWE-416 CVE-2026-69392: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50305P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50305 [HIGH] CWE-362 CVE-2026-50305: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50457P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50457 [HIGH] CWE-362 CVE-2026-50457: Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
nvd
← Previous53 / 129Next →
Microsoft Windows 11 Version 26H1 vulnerabilities | cvebase