Windows 11 26H1 (Microsoft) - vulnerabilities (CVEs)

2567 CVEs, 1008 in the last 30 days, 20 known versions, newest CVE from 2026-10-13. Vendor: Microsoft.

CVEs of Windows 11 26H1

• CVE-2026-108463 - CVSS 8.8 (high), 2026-10-13: Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
• CVE-2026-108136 - CVSS 7.8 (high), 2026-10-13: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
• CVE-2026-105016 - CVSS 9.8 (critical), 2026-10-13: Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
• CVE-2026-108135 - CVSS 7 (high), 2026-10-13: Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
• CVE-2026-108131 - CVSS 7.5 (high), 2026-10-13: No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
• CVE-2026-108130 - CVSS 7.8 (high), 2026-10-13: Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
• CVE-2026-108129 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97840 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97843 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-108127 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97839 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97842 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97841 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97844 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-108128 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97827 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97830 - CVSS 7.5 (high), 2026-10-13: Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
• CVE-2026-97833 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97836 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97829 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97832 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97835 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97838 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97828 - CVSS 6.5 (medium), 2026-10-13: Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97831 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97834 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97837 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97824 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97813 - CVSS 6.5 (medium), 2026-10-13: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.
• CVE-2026-97816 - CVSS 9.8 (critical), 2026-10-13: Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
• CVE-2026-97820 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97823 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97826 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97815 - CVSS 9.8 (critical), 2026-10-13: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
• CVE-2026-97819 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97822 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97825 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97814 - CVSS 9.8 (critical), 2026-10-13: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
• CVE-2026-97817 - CVSS 6.5 (medium), 2026-10-13: Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97821 - CVSS 6.5 (medium), 2026-10-13: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
• CVE-2026-97807 - CVSS 7.8 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97810 - CVSS 7 (high), 2026-10-13: Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
• CVE-2026-97803 - CVSS 7.8 (high), 2026-10-13: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
• CVE-2026-97806 - CVSS 7.8 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97809 - CVSS 7.8 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97812 - CVSS 7 (high), 2026-10-13: Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97805 - CVSS 9.8 (critical), 2026-10-13: Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
• CVE-2026-97808 - CVSS 7 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-97811 - CVSS 7.8 (high), 2026-10-13: Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
• CVE-2026-97804 - CVSS 7.8 (high), 2026-10-13: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
• CVE-2026-105008 - CVSS 9 (critical), 2026-10-13: No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
• CVE-2026-97798 - CVSS 7.8 (high), 2026-10-13: Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate…
• CVE-2026-105007 - CVSS 8.8 (high), 2026-10-13: An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior…
• CVE-2026-105010 - CVSS 9.8 (critical), 2026-10-13: Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
• CVE-2026-97799 - CVSS 7.8 (high), 2026-10-13: Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-103578 - CVSS 6.8 (medium), 2026-10-13: Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
• CVE-2026-105005 - CVSS 8.1 (high), 2026-10-13: Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.
• CVE-2026-103568 - CVSS 7.8 (high), 2026-10-13: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to…
• CVE-2026-103577 - CVSS 7.5 (high), 2026-10-13: Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
• CVE-2026-105004 - CVSS 7.8 (high), 2026-10-13: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
• CVE-2026-103567 - CVSS 5.5 (medium), 2026-10-13: Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
• CVE-2026-103575 - CVSS 8.8 (high), 2026-10-13: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• CVE-2026-105003 - CVSS 7.8 (high), 2026-10-13: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
• CVE-2026-105006 - CVSS 6.4 (medium), 2026-10-13: Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
• CVE-2026-103565 - CVSS 7 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-103569 - CVSS 7.5 (high), 2026-10-13: Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.
• CVE-2026-102217 - CVSS 8.8 (high), 2026-10-13: Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
• CVE-2026-103553 - CVSS 7.8 (high), 2026-10-13: Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
• CVE-2026-103558 - CVSS 7.5 (high), 2026-10-13: Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
• CVE-2026-109453 - CVSS 7 (high), 2026-10-13: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
• CVE-2026-103555 - CVSS 7 (high), 2026-10-13: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
• CVE-2026-100215 - CVSS 7.8 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
• CVE-2026-102225 - CVSS 8.8 (high), 2026-10-13: Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
• CVE-2026-103554 - CVSS 7 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-102221 - CVSS 4.4 (medium), 2026-10-13: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
• CVE-2026-102207 - CVSS 7 (high), 2026-10-13: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate…
• CVE-2026-102211 - CVSS 7 (high), 2026-10-13: Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
• CVE-2026-102216 - CVSS 7.8 (high), 2026-10-13: Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
• CVE-2026-102220 - CVSS 7.8 (high), 2026-10-13: Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
• CVE-2026-102210 - CVSS 9.8 (critical), 2026-10-13: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
• CVE-2026-102215 - CVSS 7.8 (high), 2026-10-13: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
• CVE-2026-102218 - CVSS 7.8 (high), 2026-10-13: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
• CVE-2026-102205 - CVSS 7.8 (high), 2026-10-13: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
• CVE-2026-102209 - CVSS 7 (high), 2026-10-13: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
• CVE-2026-102214 - CVSS 8.8 (high), 2026-10-13: Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.
• CVE-2026-102196 - CVSS 7.8 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-102199 - CVSS 6.5 (medium), 2026-10-13: Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.
• CVE-2026-102203 - CVSS 8.8 (high), 2026-10-13: Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.
• CVE-2026-102195 - CVSS 7 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-102198 - CVSS 5.3 (medium), 2026-10-13: Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.
• CVE-2026-102202 - CVSS 7.8 (high), 2026-10-13: Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
• CVE-2026-102206 - CVSS 6.8 (medium), 2026-10-13: Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.
• CVE-2026-102194 - CVSS 7 (high), 2026-10-13: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
• CVE-2026-102197 - CVSS 7 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-102201 - CVSS 7.8 (high), 2026-10-13: Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
• CVE-2026-102193 - CVSS 7 (high), 2026-10-13: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
• CVE-2026-88226 - CVSS 4.6 (medium), 2026-10-13: Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.
• CVE-2026-96209 - CVSS 7 (high), 2026-10-13: Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.
• CVE-2026-102187 - CVSS 5.5 (medium), 2026-10-13: Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
• CVE-2026-102191 - CVSS 7 (high), 2026-10-13: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.