Skip to content

Known vulnerabilities in Microsoft Windows 11 version 26H1

Is your version affected?

CVE Summary Score Published
CVE-2026-69436 Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69420 Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69408 Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code… 9.8 Critical Sep 8, 2026
CVE-2026-69457 Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69413 Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-69418 Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-69401 Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69406 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized… 5.5 Medium Sep 8, 2026
CVE-2026-69390 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69391 Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69404 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows… 7.0 High Sep 8, 2026
CVE-2026-69371 Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-69379 Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to… 7.0 High Sep 8, 2026
CVE-2026-69368 Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69389 Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69367 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69359 Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69362 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69349 Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose… 5.7 Medium Sep 8, 2026
CVE-2026-69345 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69377 Missing authorization in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69347 Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally 7.4 High Sep 8, 2026
CVE-2026-69333 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69339 Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an… 5.5 Medium Sep 8, 2026
CVE-2026-69366 Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network 7.1 High Sep 8, 2026

Other Microsoft products