Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Windows 11 26h2
Total 985 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-83585 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 7.8 HIGH
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-88159 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 8.8 HIGH
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-83582 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 4.7 MEDIUM
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
CVE-2026-83579 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 7.8 HIGH
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-96858 1 Microsoft 9 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 6 more 2026-10-28 N/A 5.5 MEDIUM
Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.
CVE-2026-96859 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 5.5 MEDIUM
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-96860 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 5.5 MEDIUM
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
CVE-2026-83575 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 7.0 HIGH
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83574 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 7.0 HIGH
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83573 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 6.8 MEDIUM
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83570 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 7.8 HIGH
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83568 1 Microsoft 5 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 2 more 2026-10-28 N/A 7.8 HIGH
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83567 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 7.8 HIGH
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83566 1 Microsoft 5 Windows 11 24h2, Windows 11 25h2, Windows 11 26h1 and 2 more 2026-10-28 N/A 7.0 HIGH
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-83565 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-10-28 N/A 5.5 MEDIUM
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-88152 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 7.8 HIGH
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83500 1 Microsoft 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more 2026-10-28 N/A 6.1 MEDIUM
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
CVE-2026-78459 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 7.8 HIGH
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
CVE-2026-83506 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 7.8 HIGH
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
CVE-2026-77496 1 Microsoft 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more 2026-10-28 N/A 8.8 HIGH
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.