Microsoft Windows 11 version 26H1 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 version 26H1: 2565 record(s), with affected versions and fixes.
CVE-2026-83716
High · 8.8
CWE-122 Oct 13, 2026
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-83715
High · 7.1
CWE-306 Oct 13, 2026
Windows Error Reporting Tampering Vulnerability
Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
CVE-2026-83714
Medium · 5.5
CWE-908 Oct 13, 2026
HTTP.sys Information Disclosure Vulnerability
Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.
CVE-2026-83713
Medium · 5.5
CWE-497 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-83712
High · 7.8
CWE-787 Oct 13, 2026
Windows NTFS Remote Code Execution Vulnerability
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-83710
High · 7.0
CWE-416 Oct 13, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83709
High · 7.8
CWE-122 Oct 13, 2026
Windows NTLM Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
CVE-2026-83708
High · 7.0
CWE-121 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83707
High · 7.0
CWE-416 Oct 13, 2026
Windows Event Tracing Elevation of Privilege Vulnerability
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
CVE-2026-83706
Medium · 6.7
CWE-416 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83705
Medium · 5.5
CWE-497 Oct 13, 2026
HTTP.sys Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.
CVE-2026-83704
High · 7.8
CWE-59 Oct 13, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83703
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Wi-Fi Driver Denial of Service Vulnerability
Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-83702
High · 7.0
CWE-416 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83701
High · 7.0
CWE-416 Oct 13, 2026
Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-83700
High · 7.8
CWE-416 Oct 13, 2026
Windows Now Playing Session Manager Elevation of Privilege Vulnerability
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-83699
High · 7.8
CWE-121 Oct 13, 2026
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83698
High · 7.8
CWE-122 Oct 13, 2026
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83697
Medium · 4.7
CWE-367 Oct 13, 2026
Windows Modern Device Management (MDM) Tampering Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
CVE-2026-83696
High · 7.0
CWE-416 Oct 13, 2026
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83695
Medium · 5.5
CWE-908 Oct 13, 2026
Windows Event Logging Service Information Disclosure Vulnerability
Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-83694
High · 7.0
CWE-125 Oct 13, 2026
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83693
Critical · 9.8
CWE-122 Oct 13, 2026
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83692
High · 7.8
CWE-122 Oct 13, 2026
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83691
High · 7.8
CWE-122 Oct 13, 2026
Windows DHCP Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.