Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 26H2

Is your version affected?

CVE Summary Score Published
CVE-2026-83779 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83759 Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized… 8.8 High Oct 13, 2026
CVE-2026-83760 Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83761 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83753 Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-83754 Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network 7.5 High Oct 13, 2026
CVE-2026-83775 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer… 7.0 High Oct 13, 2026
CVE-2026-83776 Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical… 6.8 Medium Oct 13, 2026
CVE-2026-83719 Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83712 Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-83722 Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges… 7.0 High Oct 13, 2026
CVE-2026-83733 Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83713 Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to… 5.5 Medium Oct 13, 2026
CVE-2026-83723 Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-83748 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-83715 Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform… 7.1 High Oct 13, 2026
CVE-2026-83749 Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83726 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83738 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 High Oct 13, 2026
CVE-2026-83727 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83740 Use after free in Windows Hello allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83690 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83707 Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83691 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83708 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026

Other Microsoft products