Skip to content

Vulnerabilities of Microsoft Windows 11 Version 26H2

Is your version affected?

CVE Summary Score Published
CVE-2026-70142 Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70198 Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70173 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70156 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70245 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.8 High Oct 13, 2026
CVE-2026-70176 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70177 Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-70205 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.0 High Oct 13, 2026
CVE-2026-70133 Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny… 7.5 High Oct 13, 2026
CVE-2026-70118 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70135 Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70136 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70126 Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent… 7.1 High Oct 13, 2026
CVE-2026-70138 Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70115 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70140 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70141 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70132 Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-70108 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70093 Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70121 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70095 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network 7.5 High Oct 13, 2026
CVE-2026-70096 Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a… 9.8 Critical Oct 13, 2026
CVE-2026-70123 Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70114 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026

Other Microsoft products