Microsoft Windows 11 Version 26H2 vulnerabilities
1,007 known vulnerabilities affecting microsoft/windows_11_version_26h2.
Total CVEs
1,007
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL44HIGH710MEDIUM253
Vulnerabilities
Page 15 of 51
CVE-2026-83836P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83836 [HIGH] CWE-122 CVE-2026-83836: Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-70109P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70109 [HIGH] CWE-122 CVE-2026-70109: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-70110P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70110 [HIGH] CWE-121 CVE-2026-70110: Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker t
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-70092P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70092 [HIGH] CWE-122 CVE-2026-70092: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-85884P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85884 [HIGH] CWE-306 CVE-2026-85884: Missing authentication for critical function in Windows Health and Optimized Experiences Service all
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83769P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83769 [HIGH] CWE-416 CVE-2026-83769: Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73027P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-73027 [HIGH] CWE-15 CVE-2026-73027: External control of system or configuration setting in Windows Setup Files Cleanup allows an authori
External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70151P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70151 [HIGH] CWE-416 CVE-2026-70151: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83732P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83732 [HIGH] CWE-416 CVE-2026-83732: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83913P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83913 [HIGH] CWE-416 CVE-2026-83913: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83690P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83690 [HIGH] CWE-416 CVE-2026-83690: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83876P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83876 [HIGH] CWE-416 CVE-2026-83876: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70023P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70023 [HIGH] CWE-416 CVE-2026-70023: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83883P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83883 [HIGH] CWE-416 CVE-2026-83883: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83677P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83677 [HIGH] CWE-401 CVE-2026-83677: Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized att
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-85945P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85945 [HIGH] CWE-416 CVE-2026-85945: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83700P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83700 [HIGH] CWE-416 CVE-2026-83700: Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privi
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88134P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-88134 [HIGH] CWE-416 CVE-2026-88134: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83712P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83712 [HIGH] CWE-787 CVE-2026-83712: Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-83796P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83796 [HIGH] CWE-416 CVE-2026-83796: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd