Skip to content

Known vulnerabilities in Microsoft Windows 11 version 26H1

Is your version affected?

CVE Summary Score Published
CVE-2026-69593 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69560 Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69499 Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a… 8.8 High Sep 8, 2026
CVE-2026-69489 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69490 Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a… 6.8 Medium Sep 8, 2026
CVE-2026-69426 Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally 7.8 High Sep 8, 2026
CVE-2026-69397 Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network 7.5 High Sep 8, 2026
CVE-2026-69392 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69352 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69910 Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69298 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69311 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69334 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code… 8.8 High Sep 8, 2026
CVE-2026-69323 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69290 Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69291 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code… 8.8 High Sep 8, 2026
CVE-2026-69287 Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69309 Double free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-68896 Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-72966 Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering… 5.5 Medium Sep 8, 2026
CVE-2026-72967 Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-72961 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally 8.2 High Sep 8, 2026
CVE-2026-72964 Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized… 5.5 Medium Sep 8, 2026
CVE-2026-72960 Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-72959 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 8.8 High Sep 8, 2026

Other Microsoft products