Microsoft Windows 11 Version 26H2 vulnerabilities
1,007 known vulnerabilities affecting microsoft/windows_11_version_26h2.
Total CVEs
1,007
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL44HIGH710MEDIUM253
Vulnerabilities
Page 34 of 51
CVE-2026-83667P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83667 [MEDIUM] CWE-125 CVE-2026-83667: Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83648P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83648 [MEDIUM] CWE-476 CVE-2026-83648: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-85821P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85821 [MEDIUM] CWE-125 CVE-2026-85821: Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
nvd
CVE-2026-102199P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-102199 [MEDIUM] CWE-121 CVE-2026-102199: Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to d
Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-96938P3MEDIUMCVSS 6.7≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-96938 [MEDIUM] CWE-122 CVE-2026-96938: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85337P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85337 [MEDIUM] CWE-125 CVE-2026-85337: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-88143P3MEDIUMCVSS 6.7≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-88143 [MEDIUM] CWE-122 CVE-2026-88143: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69635P3MEDIUMCVSS 6.6≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-69635 [MEDIUM] CWE-122 CVE-2026-69635: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-85805P3MEDIUMCVSS 6.5≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85805 [MEDIUM] CWE-358 CVE-2026-85805: Improperly implemented security check for standard in Windows PowerShell allows an unauthorized atta
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-85790P3MEDIUMCVSS 5.9≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85790 [MEDIUM] CWE-416 CVE-2026-85790: Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-85855P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-85855 [HIGH] CWE-416 CVE-2026-85855: Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83793P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83793 [HIGH] CWE-59 CVE-2026-83793: Improper link resolution before file access ('link following') in Windows Update Orchestrator Servic
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72955P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-72955 [HIGH] CWE-416 CVE-2026-72955: Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate p
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72968P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-72968 [HIGH] CWE-416 CVE-2026-72968: Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70205P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70205 [HIGH] CWE-843 CVE-2026-70205: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70118P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70118 [HIGH] CWE-416 CVE-2026-70118: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72969P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-72969 [HIGH] CWE-416 CVE-2026-72969: Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70140P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70140 [HIGH] CWE-416 CVE-2026-70140: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83915P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-83915 [HIGH] CWE-416 CVE-2026-83915: Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privile
Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70230P3HIGHCVSS 7.0≥ 10.0.26300.0, < 10.0.26300.97112026-10-13
CVE-2026-70230 [HIGH] CWE-416 CVE-2026-70230: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd