W1
Product
Windows 11 26h2
On CISA KEVExploited in the wild
771
CVEs
1
On KEV
9.8
Max CVSS
771
New 30D
Severity mix
Critical 36High 464Medium 0Low 0
Watch
Add Windows 11 26h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-96843 | 7.8 | Oct 13 | WebDAV Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96847 | 7.8 | Oct 13 | WebDAV Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96324 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96249 | 7.8 | Oct 13 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96243 | 7.8 | Oct 13 | Windows WalletService Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96186 | 7.8 | Oct 13 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88093 | 7.8 | Oct 13 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70228 | 7.8 | Oct 13 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70184 | 7.8 | Oct 13 | Windows Backup Engine Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70143 | 7.8 | Oct 13 | Windows Network File System Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70112 | 7.8 | Oct 13 | Windows Spaceport.sys Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70054 | 7.8 | Oct 13 | Windows NetBIOS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69884 | 7.8 | Oct 13 | Windows GDI Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88193 | 7.8 | Oct 13 | Microsoft Scripting Engine Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88188 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88191 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88189 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88194 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88181 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88182 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88180 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88179 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88177 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88133 | 7.8 | Oct 13 | Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88152 | 7.8 | Oct 13 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88147 | 7.8 | Oct 13 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88118 | 7.8 | Oct 13 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88128 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88134 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88105 | 7.8 | Oct 13 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87702 | 7.8 | Oct 13 | Windows Resource Management (MRM) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88072 | 7.8 | Oct 13 | Windows Host Guardian Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87700 | 7.8 | Oct 13 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87694 | 7.8 | Oct 13 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87699 | 7.8 | Oct 13 | Winlogon Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69798 | 7.8 | Oct 13 | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83931 | 7.8 | Oct 13 | Windows Hyper-V Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85911 | 7.8 | Oct 13 | Windows StateRepository API Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85908 | 7.8 | Oct 13 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85906 | 7.8 | Oct 13 | Windows Direct Composition Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85902 | 7.8 | Oct 13 | Windows Direct Composition Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85901 | 7.8 | Oct 13 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83873 | 7.8 | Oct 13 | Windows Shell Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83881 | 7.8 | Oct 13 | Windows exFAT File System Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83883 | 7.8 | Oct 13 | Windows Win32k Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83861 | 7.8 | Oct 13 | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83859 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83857 | 7.8 | Oct 13 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83840 | 7.8 | Oct 13 | Windows Error Reporting Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83830 | 7.8 | Oct 13 | Windows COM+ Event System Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
The 500 most important CVEs for this product (exploited first, then by severity)