Microsoft Windows 11 Version 26H2 vulnerabilities
1,007 known vulnerabilities affecting microsoft/windows_11_version_26h2.
Total CVEs
1,007
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL44HIGH710MEDIUM253
Vulnerabilities
Page 11 of 51
CVE-2026-85869P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85869 [HIGH] CWE-122 CVE-2026-85869: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85871P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85871 [HIGH] CWE-122 CVE-2026-85871: Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85373P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85373 [HIGH] CWE-122 CVE-2026-85373: Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96318P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96318 [HIGH] CWE-122 CVE-2026-96318: Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96312P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96312 [HIGH] CWE-122 CVE-2026-96312: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96856P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96856 [HIGH] CWE-122 CVE-2026-96856: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96217P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96217 [HIGH] CWE-122 CVE-2026-96217: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83931P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83931 [HIGH] CWE-122 CVE-2026-83931: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
nvd
CVE-2026-70278P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70278 [HIGH] CWE-122 CVE-2026-70278: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to el
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87711P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-87711 [HIGH] CWE-121 CVE-2026-87711: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69987P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69987 [HIGH] CWE-416 CVE-2026-69987: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69984P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69984 [HIGH] CWE-416 CVE-2026-69984: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69988P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69988 [HIGH] CWE-416 CVE-2026-69988: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70006P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70006 [HIGH] CWE-416 CVE-2026-70006: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69976P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69976 [HIGH] CWE-416 CVE-2026-69976: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69986P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69986 [HIGH] CWE-416 CVE-2026-69986: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69991P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69991 [HIGH] CWE-416 CVE-2026-69991: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69994P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69994 [HIGH] CWE-416 CVE-2026-69994: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69995P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69995 [HIGH] CWE-416 CVE-2026-69995: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69998P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69998 [HIGH] CWE-416 CVE-2026-69998: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo
Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd