Skip to content

Known vulnerabilities in Microsoft Windows 11 version 26H1

Is your version affected?

CVE Summary Score Published
CVE-2026-69608 Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69554 Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to… 5.5 Medium Sep 8, 2026
CVE-2026-69572 Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network 5.7 Medium Sep 8, 2026
CVE-2026-69552 Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized… 5.7 Medium Sep 8, 2026
CVE-2026-69553 Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network 7.1 High Sep 8, 2026
CVE-2026-69541 Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate… 7.8 High Sep 8, 2026
CVE-2026-69563 Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate… 7.0 High Sep 8, 2026
CVE-2026-69549 Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-69540 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69574 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69528 Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69534 Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility… 7.8 High Sep 8, 2026
CVE-2026-69524 Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-69539 Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network 7.5 High Sep 8, 2026
CVE-2026-69582 Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69527 Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information… 5.5 Medium Sep 8, 2026
CVE-2026-69525 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69621 Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69514 Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a… 7.5 High Sep 8, 2026
CVE-2026-69516 Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-69504 Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69507 Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component… 5.7 Medium Sep 8, 2026
CVE-2026-69500 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69505 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-69517 Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026

Other Microsoft products