Skip to content

Known vulnerabilities in Microsoft Windows 11 version 26H1

Is your version affected?

CVE Summary Score Published
CVE-2026-62740 Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-62753 Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-62729 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service… 7.0 High Aug 11, 2026
CVE-2026-62746 Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-62748 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service… 7.0 High Aug 11, 2026
CVE-2026-62724 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-62723 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-62719 Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-62722 Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-62712 Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-62707 Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-62713 Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges… 7.8 High Aug 11, 2026
CVE-2026-62703 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-62705 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter… 7.0 High Aug 11, 2026
CVE-2026-62702 Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network 6.8 Medium Aug 11, 2026
CVE-2026-62699 Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to… 6.8 Medium Aug 11, 2026
CVE-2026-62696 Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized… 7.8 High Aug 11, 2026
CVE-2026-62690 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push… 7.0 High Aug 11, 2026
CVE-2026-62693 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service… 7.0 High Aug 11, 2026
CVE-2026-62688 Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-62695 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61936 Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature… 5.5 Medium Aug 11, 2026
CVE-2026-61939 Use after free in Winlogon allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-61933 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-61934 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026

Other Microsoft products