Microsoft Windows 11 Version 26H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 Version 26H2: 1007 record(s), with affected versions and fixes.
CVE-2026-61931
High · 7.8
CWE-416 Oct 13, 2026
Windows Perception Simulation Service Elevation of Privilege Vulnerability
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
CVE-2026-49785
High · 7.8
CWE-404 Oct 13, 2026
UEFI Secure Boot Security Feature Bypass Vulnerability
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
CVE-2026-108468
High · 7.0
CWE-416 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-108467
High · 8.8
CWE-122 Oct 13, 2026
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
CVE-2026-108466
Medium · 5.3
CWE-125 Oct 13, 2026
Windows Kernel Denial of Service Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
CVE-2026-108465
High · 7.0
CWE-416 Oct 13, 2026
Windows Update Delivery Optimization Elevation of Privilege Vulnerability
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
CVE-2026-108464
High · 7.0
CWE-416 Oct 13, 2026
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
CVE-2026-108463
High · 8.8
CWE-41 Oct 13, 2026
Windows SmartScreen Security Feature Bypass Vulnerability
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-108462
Medium · 5.5
CWE-497 Oct 13, 2026
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
CVE-2026-108461
High · 7.0
CWE-416 Oct 13, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-108460
High · 8.1
CWE-416 Oct 13, 2026
Windows Message Queuing Remote Code Execution Vulnerability
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
CVE-2026-108399
High · 7.2
CWE-122 Oct 13, 2026
Windows Hyper-V Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVE-2026-108396
High · 7.0
CWE-367 Oct 13, 2026
Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-108136
High · 7.8
CWE-416 Oct 13, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-108135
High · 7.0
CWE-59 Oct 13, 2026
Windows Backup Engine Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-108134
High · 7.0
CWE-416 Oct 13, 2026
Windows Autopilot Elevation of Privilege Vulnerability
Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-108131
High · 7.5
CWE-295 Oct 13, 2026
Active Directory Federation Services (AD FS) Spoofing Vulnerability
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-108130
High · 7.8
CWE-122 Oct 13, 2026
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-108129
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-108128
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-108127
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-105733
High · 8.8
Oct 13, 2026
Windows Hyper-V Remote Code Execution Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-105723
High · 7.5
CWE-822 Oct 13, 2026
Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105722
High · 7.0
CWE-416 Oct 13, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-105016
Critical · 9.8
CWE-122 Oct 13, 2026
Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.