Skip to content

Vulnerabilities of Microsoft Windows 11 version 26H1

Is your version affected?

CVE Summary Score Published
CVE-2026-32217 Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information… 5.5 Medium Apr 14, 2026
CVE-2026-32215 Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information… 5.5 Medium Apr 14, 2026
CVE-2026-32202 Exploited Microsoft Windows Protection Mechanism Failure Vulnerability 4.3 Medium Apr 14, 2026
CVE-2026-32195 Stack-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 High Apr 14, 2026
CVE-2026-32183 Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an… 7.8 High Apr 14, 2026
CVE-2026-32181 Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally 5.5 Medium Apr 14, 2026
CVE-2026-32165 Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-32160 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push… 7.8 High Apr 14, 2026
CVE-2026-32158 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push… 7.8 High Apr 14, 2026
CVE-2026-32159 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push… 7.8 High Apr 14, 2026
CVE-2026-32157 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Apr 14, 2026
CVE-2026-32154 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-32156 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an unauthorized attacker to execute code… 7.4 High Apr 14, 2026
CVE-2026-32093 Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery… 7.0 High Apr 14, 2026
CVE-2026-32152 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-32089 Use after free in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-32090 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered… 7.8 High Apr 14, 2026
CVE-2026-32087 Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges… 7.0 High Apr 14, 2026
CVE-2026-32083 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service… 7.0 High Apr 14, 2026
CVE-2026-32085 Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized… 5.5 Medium Apr 14, 2026
CVE-2026-32082 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service… 7.0 High Apr 14, 2026
CVE-2026-32081 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to… 5.5 Medium Apr 14, 2026
CVE-2026-32075 Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges… 7.0 High Apr 14, 2026
CVE-2026-32073 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 High Apr 14, 2026
CVE-2026-27931 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally 5.5 Medium Apr 14, 2026

Other Microsoft products