Skip to content

Known vulnerabilities in Microsoft Windows 11 version 26H1

Is your version affected?

CVE Summary Score Published
CVE-2026-105723 Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate… 7.5 High Oct 13, 2026
CVE-2026-108399 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally 7.2 High Oct 13, 2026
CVE-2026-70235 Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally 5.5 Medium Oct 13, 2026
CVE-2026-108458 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-97800 Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to… 7.8 High Oct 13, 2026
CVE-2026-96183 Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized… 5.5 Medium Oct 13, 2026
CVE-2026-102227 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-108468 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-85921 Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally 8.2 High Sep 14, 2026
CVE-2026-83498 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to… 7.8 High Sep 8, 2026
CVE-2026-83501 Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose… 5.5 Medium Sep 8, 2026
CVE-2026-84000 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally 7.8 High Sep 8, 2026
CVE-2026-83995 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83997 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-83992 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-83989 Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over… 7.5 High Sep 8, 2026
CVE-2026-83990 Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83983 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83985 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83980 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83987 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83978 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83982 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83977 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83981 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026

Other Microsoft products