Microsoft Windows 11 Version 26H2 vulnerabilities
1,007 known vulnerabilities affecting microsoft/windows_11_version_26h2.
Total CVEs
1,007
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL44HIGH710MEDIUM253
Vulnerabilities
Page 20 of 51
CVE-2026-96220P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96220 [HIGH] CWE-94 CVE-2026-96220: Improper control of generation of code ('code injection') in Windows Assigned Access allows an autho
Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85872P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85872 [HIGH] CWE-416 CVE-2026-85872: Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges loc
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85376P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85376 [HIGH] CWE-1390 CVE-2026-85376: Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate pri
Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88073P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-88073 [HIGH] CWE-416 CVE-2026-88073: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-103558P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-103558 [HIGH] CWE-833 CVE-2026-103558: Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-96317P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96317 [HIGH] CWE-416 CVE-2026-96317: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88080P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-88080 [HIGH] CWE-416 CVE-2026-88080: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85334P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85334 [HIGH] CWE-125 CVE-2026-85334: Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to discl
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-88101P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-88101 [HIGH] CWE-1390 CVE-2026-88101: Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-108131P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-108131 [HIGH] CWE-295 CVE-2026-108131: No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacke
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-83739P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83739 [HIGH] CWE-416 CVE-2026-83739: Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-69733P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69733 [HIGH] CWE-426 CVE-2026-69733: Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69882P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69882 [HIGH] CWE-426 CVE-2026-69882: Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69923P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69923 [HIGH] CWE-427 CVE-2026-69923: Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges l
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70133P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70133 [HIGH] CWE-770 CVE-2026-70133: Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized at
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-83647P3HIGHCVSS 7.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83647 [HIGH] CWE-125 CVE-2026-83647: Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny servi
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-69783P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69783 [HIGH] CWE-73 CVE-2026-69783: External control of file name or path in Windows Update allows an authorized attacker to elevate pri
External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83704P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83704 [HIGH] CWE-59 CVE-2026-83704: Improper link resolution before file access ('link following') in Microsoft Windows Search Component
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70184P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70184 [HIGH] CWE-41 CVE-2026-70184: Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to el
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83506P3HIGHCVSS 7.8≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83506 [HIGH] CWE-426 CVE-2026-83506: Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
nvd