Microsoft Windows 11 Version 26H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 Version 26H2: 1007 record(s), with affected versions and fixes.
CVE-2026-69974
Medium · 4.7
CWE-125 Oct 13, 2026
Desktop Window Manager Information Disclosure Vulnerability
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.
CVE-2026-69973
Medium · 6.5
CWE-22 Oct 13, 2026
Windows libarchive Tampering Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
CVE-2026-69971
Medium · 5.5
CWE-863 Oct 13, 2026
Windows Kernel-Mode Drivers Information Disclosure Vulnerability
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
CVE-2026-69970
High · 7.0
CWE-122 Oct 13, 2026
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69969
Medium · 4.7
CWE-59 Oct 13, 2026
Windows AppX Deployment Service Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
CVE-2026-69968
Medium · 6.5
CWE-23 Oct 13, 2026
Windows libarchive Tampering Vulnerability
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
CVE-2026-69967
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Overlay Filter Information Disclosure Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69966
High · 7.8
CWE-190 Oct 13, 2026
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69964
High · 7.0
CWE-416 Oct 13, 2026
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69963
High · 7.8
CWE-122 Oct 13, 2026
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69959
High · 7.8
CWE-125 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69958
Medium · 6.8
CWE-122 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69957
High · 7.8
CWE-126 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69955
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69954
Medium · 5.5
CWE-126 Oct 13, 2026
Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69953
High · 7.8
CWE-126 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69952
High · 7.8
CWE-125 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69950
High · 7.8
CWE-126 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69949
High · 7.8
CWE-122 Oct 13, 2026
Windows Client for NFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69947
Medium · 6.8
CWE-122 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69945
High · 8.8
CWE-862 Oct 13, 2026
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
CVE-2026-69942
High · 7.8
CWE-126 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69940
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69935
High · 7.0
CWE-362 Oct 13, 2026
Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69934
High · 7.8
CWE-20 Oct 13, 2026
Windows Spaceport.sys Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.