Skip to content

Vulnerabilities of Microsoft Windows 11 Version 26H2

Is your version affected?

CVE Summary Score Published
CVE-2026-69634 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-69705 Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-68836 Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70255 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70252 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70278 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-70271 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70280 Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally 4.4 Medium Oct 13, 2026
CVE-2026-70272 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70273 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70274 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70284 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-70285 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70218 Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-70234 Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70223 Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70225 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.8 High Oct 13, 2026
CVE-2026-70249 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70253 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70233 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-70247 Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-70168 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 High Oct 13, 2026
CVE-2026-70150 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70169 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices… 7.0 High Oct 13, 2026
CVE-2026-70195 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information… 4.7 Medium Oct 13, 2026

Other Microsoft products