Microsoft Windows 11 Version 26H2 vulnerabilities
1,007 known vulnerabilities affecting microsoft/windows_11_version_26h2.
Total CVEs
1,007
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL44HIGH710MEDIUM253
Vulnerabilities
Page 16 of 51
CVE-2026-83762P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83762 [HIGH] CWE-416 CVE-2026-83762: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87694P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-87694 [HIGH] CWE-416 CVE-2026-87694: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83721P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83721 [HIGH] CWE-416 CVE-2026-83721: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70218P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70218 [HIGH] CWE-285 CVE-2026-70218: Insufficient granularity of access control in Windows StateRepository API allows an authorized attac
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83859P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83859 [HIGH] CWE-416 CVE-2026-83859: Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85906P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85906 [HIGH] CWE-416 CVE-2026-85906: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83922P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83922 [HIGH] CWE-416 CVE-2026-83922: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83912P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83912 [HIGH] CWE-416 CVE-2026-83912: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85851P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85851 [HIGH] CWE-416 CVE-2026-85851: Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85833P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85833 [HIGH] CWE-416 CVE-2026-85833: Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85836P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85836 [HIGH] CWE-416 CVE-2026-85836: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96308P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96308 [HIGH] CWE-416 CVE-2026-96308: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-84013P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-84013 [HIGH] CWE-416 CVE-2026-84013: Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges local
Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96309P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96309 [HIGH] CWE-416 CVE-2026-96309: Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges lo
Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96223P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96223 [HIGH] CWE-416 CVE-2026-96223: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87700P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-87700 [HIGH] CWE-416 CVE-2026-87700: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85322P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85322 [HIGH] CWE-908 CVE-2026-85322: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthor
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-96245P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96245 [HIGH] CWE-125 CVE-2026-96245: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-96246P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96246 [HIGH] CWE-125 CVE-2026-96246: Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose inform
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-87713P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-87713 [HIGH] CWE-416 CVE-2026-87713: Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privilege
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.
nvd