Microsoft Windows 11 Version 26H1 vulnerabilities
2,567 known vulnerabilities affecting microsoft/windows_11_version_26h1.
Total CVEs
2,567
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL96HIGH1900MEDIUM566LOW5
Vulnerabilities
Page 70 of 129
CVE-2026-48576P3HIGHCVSS 7.9≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-48576 [HIGH] CWE-1329 CVE-2026-48576: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-83516P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83516 [HIGH] CWE-125 CVE-2026-83516: Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthori
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-45654P3HIGHCVSS 7.9≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-45654 [HIGH] CWE-284 CVE-2026-45654: Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security fe
Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-47656P3HIGHCVSS 7.9≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-47656 [HIGH] CWE-693 CVE-2026-47656: Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a secur
Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-44812P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-44812 [HIGH] CWE-190 CVE-2026-44812: Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute c
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-44803P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-44803 [HIGH] CWE-190 CVE-2026-44803: Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute c
Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-57095P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-57095 [HIGH] CWE-200 CVE-2026-57095: Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-58609P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-58609 [HIGH] CWE-125 CVE-2026-58609: Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code l
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-21232P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.15752026-02-10
CVE-2026-21232 [HIGH] CWE-822 CVE-2026-21232: Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privilege
Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69760P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69760 [HIGH] CWE-125 CVE-2026-69760: Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a networ
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-72949P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-72949 [HIGH] CWE-476 CVE-2026-72949: Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unaut
Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-83848P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83848 [HIGH] CWE-822 CVE-2026-83848: Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70142P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70142 [HIGH] CWE-426 CVE-2026-70142: Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-25165P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.17192026-03-10
CVE-2026-25165 [HIGH] CWE-476 CVE-2026-25165: Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate pr
Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50697P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50697 [HIGH] CWE-200 CVE-2026-50697: Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver
Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70566P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-70566 [HIGH] CWE-476 CVE-2026-70566: Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges loc
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69850P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-69850 [HIGH] CWE-822 CVE-2026-69850: Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privi
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-84017P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-84017 [HIGH] CWE-476 CVE-2026-84017: Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-23672P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.17192026-03-10
CVE-2026-23672 [HIGH] CWE-125 CVE-2026-23672: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-50498P3HIGHCVSS 7.8≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50498 [HIGH] CWE-125 CVE-2026-50498: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
nvd