Microsoft Windows 11 version 26H1 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 version 26H1: 2561 record(s), with affected versions and fixes.
CVE-2026-62892
High · 7.0
CWE-416 Aug 11, 2026
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-62890
High · 7.8
CWE-122 Aug 11, 2026
Windows GDI+ Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
CVE-2026-62889
High · 8.1
CWE-415 Aug 11, 2026
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-62888
High · 7.8
CWE-416 Aug 11, 2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62887
Medium · 5.5
CWE-125 Aug 11, 2026
Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62885
High · 7.8
CWE-122 Aug 11, 2026
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62883
Medium · 6.7
CWE-122 Aug 11, 2026
Windows DNS Elevation of Privilege Vulnerability
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-62881
Medium · 6.7
CWE-122 Aug 11, 2026
Windows DNS Elevation of Privilege Vulnerability
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-62880
High · 7.8
CWE-125 Aug 11, 2026
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62876
High · 7.8
CWE-125 Aug 11, 2026
Windows Win32k Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62832
High · 7.8
CWE-59 Aug 11, 2026
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62822
High · 8.8
CWE-122 Aug 11, 2026
Windows GDI+ Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2026-62819
High · 8.1
CWE-416 Aug 11, 2026
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-62816
High · 8.8
CWE-122 Aug 11, 2026
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-62815
Critical · 9.8
CWE-416 Aug 11, 2026
Microsoft QUIC Remote Code Execution Vulnerability
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-62811
High · 7.8
CWE-122 Aug 11, 2026
Windows HTTP.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62800
High · 8.8
CWE-122 Aug 11, 2026
Windows SMBv3 Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
CVE-2026-62799
High · 7.8
CWE-122 Aug 11, 2026
Windows SMB Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-62798
Medium · 5.5
CWE-822 Aug 11, 2026
Win32k Information Disclosure Vulnerability
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62797
High · 7.8
CWE-122 Aug 11, 2026
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62796
Medium · 5.5
CWE-125 Aug 11, 2026
Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62795
High · 8.8
CWE-416 Aug 11, 2026
Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-62793
Medium · 5.5
CWE-126 Aug 11, 2026
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62792
High · 8.1
CWE-121 Aug 11, 2026
Windows TCP/IP Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-62790
High · 8.8
CWE-122 Aug 11, 2026
Windows SMBv3 Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.