Microsoft Windows 11 Version 26H2 vulnerabilities
1,007 known vulnerabilities affecting microsoft/windows_11_version_26h2.
Total CVEs
1,007
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL44HIGH710MEDIUM253
Vulnerabilities
Page 33 of 51
CVE-2026-87704P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-87704 [HIGH] CWE-416 CVE-2026-87704: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87693P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-87693 [HIGH] CWE-416 CVE-2026-87693: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85370P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85370 [HIGH] CWE-416 CVE-2026-85370: Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85364P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85364 [HIGH] CWE-416 CVE-2026-85364: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88141P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-88141 [HIGH] CWE-416 CVE-2026-88141: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85361P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85361 [HIGH] CWE-416 CVE-2026-85361: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87708P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-87708 [HIGH] CWE-416 CVE-2026-87708: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96322P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96322 [HIGH] CWE-416 CVE-2026-96322: Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privilege
Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88124P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-88124 [HIGH] CWE-416 CVE-2026-88124: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87715P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-87715 [HIGH] CWE-416 CVE-2026-87715: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97793P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-97793 [HIGH] CWE-306 CVE-2026-97793: Missing authentication for critical function in Windows Setup and Deployment allows an authorized at
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85372P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85372 [HIGH] CWE-416 CVE-2026-85372: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96302P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96302 [HIGH] CWE-416 CVE-2026-96302: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96305P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96305 [HIGH] CWE-416 CVE-2026-96305: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96216P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96216 [HIGH] CWE-416 CVE-2026-96216: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102211P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-102211 [HIGH] CWE-362 CVE-2026-102211: Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96313P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96313 [HIGH] CWE-306 CVE-2026-96313: Missing authentication for critical function in Windows Push Notifications allows an authorized atta
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85846P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85846 [HIGH] CWE-416 CVE-2026-85846: Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges lo
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96307P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96307 [HIGH] CWE-416 CVE-2026-96307: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83649P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83649 [MEDIUM] CWE-125 CVE-2026-83649: Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorize
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
nvd