Microsoft Windows 11 Version 26H1 vulnerabilities, page 5
2,571 vulnerabilities
Known vulnerabilities in Microsoft Windows 11 Version 26H1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96914microsoftwindows 10 version 1607+15
EPSS score0.27%
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.CVE-2026-96913microsoftwindows 10 version 1809+12EPSS score0.33%
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-96912microsoftwindows 10 version 1809+12EPSS score0.32%
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.CVE-2026-96911microsoftwindows 10 version 1607+19EPSS score0.40%
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.CVE-2026-96910microsoftwindows 10 version 1607+19EPSS score0.40%
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.CVE-2026-96909microsoftwindows_11_23h2+12EPSS score0.87%
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.CVE-2026-96867microsoftwindows 10 version 1607+19EPSS score0.32%
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.CVE-2026-96865microsoftwindows 10 version 1607+15EPSS score0.36%
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.CVE-2026-96863microsoftwindows 11 version 23h2+6EPSS score0.31%
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-96862microsoftwindows 10 version 1607+19EPSS score0.32%
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.CVE-2026-96860microsoftwindows 10 version 1607+19EPSS score0.40%
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.CVE-2026-96859microsoftwindows 10 version 1607+19EPSS score0.40%
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.CVE-2026-96858microsoftwindows 10 version 21h2+9EPSS score0.35%
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.CVE-2026-96857microsoftwindows_10_1809+20EPSS score0.38%
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.CVE-2026-96856microsoftwindows_10_1607+28EPSS score0.31%
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.CVE-2026-96855microsoftwindows_10_1809+20EPSS score0.28%
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.CVE-2026-96854microsoftwindows_10_1607+27EPSS score0.30%
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.CVE-2026-96853microsoftwindows_10_1607+28EPSS score0.18%
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.CVE-2026-96852microsoftwindows_10_1607+28EPSS score0.25%
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.CVE-2026-96851microsoftwindows_10_1607+28EPSS score0.39%
Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.