Microsoft Windows 11 version 26H1 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 version 26H1: 2561 record(s), with affected versions and fixes.
CVE-2026-69265
High · 7.8
CWE-125 Sep 8, 2026
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68898
Medium · 6.5
CWE-125 Sep 8, 2026
Windows iSCSI Denial of Service Vulnerability
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
CVE-2026-68897
High · 7.0
CWE-122 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68896
High · 7.8
CWE-36 Sep 8, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-68895
Medium · 5.5
CWE-197 Sep 8, 2026
Internet Storage Name Service Information Disclosure Vulnerability
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
CVE-2026-68894
High · 8.0
CWE-122 Sep 8, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVE-2026-68892
High · 7.8
CWE-122 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68891
Medium · 4.7
CWE-125 Sep 8, 2026
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-68890
High · 7.8
CWE-122 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68889
High · 7.1
CWE-122 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-68888
High · 7.8
CWE-122 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68887
High · 7.5
CWE-125 Sep 8, 2026
Windows Message Queuing Queue Manager Denial of Service Vulnerability
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network.
CVE-2026-68886
Medium · 5.5
CWE-209 Sep 8, 2026
Windows Network Connection Broker Information Disclosure Vulnerability
Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.
CVE-2026-68885
High · 7.8
CWE-122 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68884
High · 7.0
CWE-122 Sep 8, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-68881
Medium · 5.5
CWE-125 Sep 8, 2026
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-68880
High · 8.0
CWE-122 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-68878
High · 8.0
CWE-121 Sep 8, 2026
Windows Fast FAT Driver Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-68877
High · 7.8
CWE-122 Sep 8, 2026
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVE-2026-68876
High · 8.0
CWE-122 Sep 8, 2026
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-68875
High · 7.8
CWE-126 Sep 8, 2026
Windows NTFS Remote Code Execution Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-68874
Medium · 5.7
CWE-125 Sep 8, 2026
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.
CVE-2026-68873
Medium · 5.5
CWE-532 Sep 8, 2026
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
CVE-2026-68852
Medium · 5.5
CWE-200 Sep 8, 2026
Microsoft Account Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
CVE-2026-68851
Medium · 5.5
CWE-126 Sep 8, 2026
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.