Skip to content

Known vulnerabilities in Microsoft Windows 11 version 26H1

Is your version affected?

CVE Summary Score Published
CVE-2026-72950 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 8.8 High Sep 8, 2026
CVE-2026-72941 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-72942 Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network 6.5 Medium Sep 8, 2026
CVE-2026-72952 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally 7.0 High Sep 8, 2026
CVE-2026-72953 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-72933 Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code… 8.8 High Sep 8, 2026
CVE-2026-72932 Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a… 7.5 High Sep 8, 2026
CVE-2026-72936 Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-72931 Missing release of resource after effective lifetime in Windows Secure Socket Tunneling Protocol (SSTP) allows an… 4.7 Medium Sep 8, 2026
CVE-2026-71352 Integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager allows an authorized attacker to… 8.8 High Sep 8, 2026
CVE-2026-72927 Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally 6.7 Medium Sep 8, 2026
CVE-2026-71342 Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-71349 Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical… 6.8 Medium Sep 8, 2026
CVE-2026-70579 Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network 7.5 High Sep 8, 2026
CVE-2026-70583 Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-70578 Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70577 Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70581 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-70575 Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network 5.3 Medium Sep 8, 2026
CVE-2026-70572 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-70569 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-70573 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70567 Double free in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70568 Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-70565 Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026

Other Microsoft products