Microsoft Windows 11 26H1 vulnerabilities, page 3
1,881 vulnerabilities
Known vulnerabilities in Microsoft Windows 11 26H1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-97803microsoftwindows_11_26h1+1
EPSS score0.31%
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-97800microsoftwindows_11_24h2+7EPSS score0.24%
Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.CVE-2026-97799microsoftwindows_11_24h2+7EPSS score0.29%
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.CVE-2026-97798microsoftwindows_10_21h2+16EPSS score0.34%
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.CVE-2026-97794microsoftwindows_11_23h2+12EPSS score0.31%
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.CVE-2026-97793microsoftwindows_10_1809+20EPSS score0.24%
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.CVE-2026-97790microsoftwindows_11_24h2+10EPSS score0.36%
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.CVE-2026-97788microsoftmicrosoft .net framework 3.5+37EPSS score0.68%
Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.CVE-2026-97787microsoftwindows_11_23h2+12EPSS score0.20%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.CVE-2026-96953microsoftwindows_10_1607+28EPSS score0.24%
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.CVE-2026-96952microsoftwindows_10_1809+20EPSS score0.78%
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.CVE-2026-96951microsoftoutlook+30KEVEPSS score1.51%
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.CVE-2026-96950microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96949microsoftwindows_10_1607+28EPSS score0.19%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96948microsoftwindows_10_1607+28EPSS score0.46%
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.CVE-2026-96947microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96946microsoftwindows_10_1607+28EPSS score0.31%
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.CVE-2026-96944microsoftwindows_11_24h2+10EPSS score0.46%
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.CVE-2026-96939microsoftwindows_11_23h2+11EPSS score0.20%
Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.CVE-2026-96938microsoftwindows_10_1607+28EPSS score0.33%
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.