cbcvebase.

Microsoft Windows 11 Version 26H1 vulnerabilities

2,567 known vulnerabilities affecting microsoft/windows_11_version_26h1.

Total CVEs
2,567
CISA KEV
10
actively exploited
Public exploits
6
Exploited in wild
13
Severity breakdown
CRITICAL97HIGH1901MEDIUM564LOW5

Vulnerabilities

Page 86 of 129
CVE-2026-69374P3MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69374 [MEDIUM] CWE-770 CVE-2026-69374: Allocation of resources without limits or throttling in Windows SMB Server allows an authorized atta Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83521P3MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-83521 [MEDIUM] CWE-125 CVE-2026-83521: Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information ov Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-56186P3MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-56186 [MEDIUM] CWE-125 CVE-2026-56186: Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-85821P3MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85821 [MEDIUM] CWE-125 CVE-2026-85821: Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50432P3MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.25252026-07-14
CVE-2026-50432 [MEDIUM] CWE-416 CVE-2026-50432: Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny ser Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.
nvd
CVE-2026-65794P3MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.27042026-08-11
CVE-2026-65794 [MEDIUM] CWE-126 CVE-2026-65794: Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-96938P3MEDIUMCVSS 6.7≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-96938 [MEDIUM] CWE-122 CVE-2026-96938: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85337P3MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85337 [MEDIUM] CWE-125 CVE-2026-85337: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-69350P3MEDIUMCVSS 6.7≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69350 [MEDIUM] CWE-122 CVE-2026-69350: Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42907P3MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.22692026-06-09
CVE-2026-42907 [MEDIUM] CWE-200 CVE-2026-42907: Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized att Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-85805P3MEDIUMCVSS 6.5≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85805 [MEDIUM] CWE-358 CVE-2026-85805: Improperly implemented security check for standard in Windows PowerShell allows an unauthorized atta Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2024-49075P3HIGHCVSS 7.5≥ 10.0.28000.0, < 10.0.28000.22692024-12-12
CVE-2024-49075 [HIGH] CWE-400 CVE-2024-49075: Windows Remote Desktop Services Denial of Service Vulnerability Windows Remote Desktop Services Denial of Service Vulnerability
nvd
CVE-2026-40413P3HIGHCVSS 7.4≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-40413 [HIGH] CWE-476 CVE-2026-40413: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an a Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.
cvelistv5nvd
CVE-2026-45585P3MEDIUMCVSS 6.8≥ 10.0.28000.0, < 10.0.28000.22692026-05-20
CVE-2026-45585 [MEDIUM] CWE-77 CVE-2026-45585: Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as &qu Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can be implemented to protect against this vulnerability until th
nvd
CVE-2026-41097P3MEDIUMCVSS 6.7≥ 10.0.28000.0, < 10.0.28000.21132026-05-12
CVE-2026-41097 [MEDIUM] CWE-1329 CVE-2026-41097: Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-69383P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-69383 [HIGH] CWE-73 CVE-2026-69383: External control of file name or path in Windows Shell allows an authorized attacker to elevate priv External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32073P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.18362026-04-14
CVE-2026-32073 [HIGH] CWE-416 CVE-2026-32073: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-25179P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.17192026-03-10
CVE-2026-25179 [HIGH] CWE-1287 CVE-2026-25179: Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allo Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85855P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.32312026-10-13
CVE-2026-85855 [HIGH] CWE-416 CVE-2026-85855: Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-80093P3HIGHCVSS 7.0≥ 10.0.28000.0, < 10.0.28000.29542026-09-08
CVE-2026-80093 [HIGH] CWE-416 CVE-2026-80093: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
← Previous86 / 129Next →
Microsoft Windows 11 Version 26H1 vulnerabilities | cvebase