Microsoft Windows 11 Version 26H2 vulnerabilities
1,007 known vulnerabilities affecting microsoft/windows_11_version_26h2.
Total CVEs
1,007
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL44HIGH710MEDIUM253
Vulnerabilities
Page 30 of 51
CVE-2026-97838P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97838 [MEDIUM] CWE-125 CVE-2026-97838: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97840P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97840 [MEDIUM] CWE-125 CVE-2026-97840: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97835P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97835 [MEDIUM] CWE-125 CVE-2026-97835: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97839P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97839 [MEDIUM] CWE-125 CVE-2026-97839: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97836P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97836 [MEDIUM] CWE-125 CVE-2026-97836: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97844P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97844 [MEDIUM] CWE-125 CVE-2026-97844: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97831P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97831 [MEDIUM] CWE-125 CVE-2026-97831: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97843P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97843 [MEDIUM] CWE-125 CVE-2026-97843: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-69968P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69968 [MEDIUM] CWE-23 CVE-2026-69968: Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering o
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2026-97833P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97833 [MEDIUM] CWE-125 CVE-2026-97833: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97832P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97832 [MEDIUM] CWE-125 CVE-2026-97832: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97834P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97834 [MEDIUM] CWE-125 CVE-2026-97834: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-69973P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69973 [MEDIUM] CWE-22 CVE-2026-69973: Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2026-70144P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70144 [HIGH] CWE-416 CVE-2026-70144: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70076P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70076 [HIGH] CWE-416 CVE-2026-70076: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83886P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83886 [HIGH] CWE-416 CVE-2026-83886: Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privi
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70249P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70249 [HIGH] CWE-416 CVE-2026-70249: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70271P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70271 [HIGH] CWE-416 CVE-2026-70271: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70253P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70253 [HIGH] CWE-416 CVE-2026-70253: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70176P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70176 [HIGH] CWE-416 CVE-2026-70176: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd