Microsoft Windows 11 Version 26H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 Version 26H2: 1007 record(s), with affected versions and fixes.
CVE-2026-70148
Medium · 6.5
CWE-441 Oct 13, 2026
Windows Broadcast DVR User Service Information Disclosure Vulnerability
Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CVE-2026-70147
Critical · 9.8
CWE-122 Oct 13, 2026
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70144
High · 7.0
CWE-416 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70143
High · 7.8
CWE-122 Oct 13, 2026
Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
CVE-2026-70142
High · 7.8
CWE-426 Oct 13, 2026
Windows Update Service Elevation of Privilege Vulnerability
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70141
Medium · 5.5
CWE-125 Oct 13, 2026
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-70140
High · 7.0
CWE-416 Oct 13, 2026
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70139
High · 7.8
CWE-122 Oct 13, 2026
Windows Update Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70138
High · 7.8
CWE-122 Oct 13, 2026
Windows OLE Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
CVE-2026-70137
Medium · 5.5
CWE-306 Oct 13, 2026
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
CVE-2026-70136
High · 7.0
CWE-416 Oct 13, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70135
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Remote POS Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.
CVE-2026-70134
High · 7.0
CWE-416 Oct 13, 2026
Windows Event Tracing Elevation of Privilege Vulnerability
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
CVE-2026-70133
High · 7.5
CWE-770 Oct 13, 2026
Windows SMB Server Denial of Service Vulnerability
Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.
CVE-2026-70132
High · 7.8
CWE-122 Oct 13, 2026
Windows Portable Device File System Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70131
High · 7.8
CWE-122 Oct 13, 2026
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.
CVE-2026-70128
Medium · 5.5
CWE-125 Oct 13, 2026
HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-70126
High · 7.1
CWE-20 Oct 13, 2026
Windows Bluetooth Port Driver Remote Code Execution
Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-70123
High · 7.8
CWE-122 Oct 13, 2026
Microsoft Graphics Component Elevation of Privilege Vulnerability
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
CVE-2026-70122
Medium · 6.5
CWE-367 Oct 13, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70121
High · 7.8
CWE-122 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-70118
High · 7.0
CWE-416 Oct 13, 2026
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70117
High · 7.8
CWE-122 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-70116
Medium · 4.2
CWE-121 Oct 13, 2026
Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-70115
High · 7.0
CWE-416 Oct 13, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.