W1
Product
Windows 11 26h2
On CISA KEVExploited in the wild
771
CVEs
1
On KEV
9.8
Max CVSS
771
New 30D
Severity mix
Critical 36High 464Medium 0Low 0
Watch
Add Windows 11 26h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88188 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88191 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88189 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88194 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88181 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88182 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88180 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88179 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88177 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88133 | 7.8 | Oct 13 | Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88152 | 7.8 | Oct 13 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88147 | 7.8 | Oct 13 | Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88118 | 7.8 | Oct 13 | Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88128 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88134 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88105 | 7.8 | Oct 13 | Windows Broadcast DVR User Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87702 | 7.8 | Oct 13 | Windows Resource Management (MRM) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88072 | 7.8 | Oct 13 | Windows Host Guardian Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87700 | 7.8 | Oct 13 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87694 | 7.8 | Oct 13 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87699 | 7.8 | Oct 13 | Winlogon Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69798 | 7.8 | Oct 13 | Windows Wired AutoConfig Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83931 | 7.8 | Oct 13 | Windows Hyper-V Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85911 | 7.8 | Oct 13 | Windows StateRepository API Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85908 | 7.8 | Oct 13 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85906 | 7.8 | Oct 13 | Windows Direct Composition Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85902 | 7.8 | Oct 13 | Windows Direct Composition Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85901 | 7.8 | Oct 13 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83873 | 7.8 | Oct 13 | Windows Shell Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83881 | 7.8 | Oct 13 | Windows exFAT File System Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83883 | 7.8 | Oct 13 | Windows Win32k Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83861 | 7.8 | Oct 13 | Windows Remote Desktop Protocol Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83859 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83857 | 7.8 | Oct 13 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83840 | 7.8 | Oct 13 | Windows Error Reporting Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83830 | 7.8 | Oct 13 | Windows COM+ Event System Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83829 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83792 | 7.8 | Oct 13 | Windows Device Install Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83791 | 7.8 | Oct 13 | Windows Virtual Input Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83756 | 7.8 | Oct 13 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83640 | 7.8 | Oct 13 | Windows NTFS Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83639 | 7.8 | Oct 13 | Windows Sensor Data Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83638 | 7.8 | Oct 13 | Windows USB Driver Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83634 | 7.8 | Oct 13 | Windows BitLocker Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83588 | 7.8 | Oct 13 | Windows USB Driver Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83585 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83579 | 7.8 | Oct 13 | Windows Smart Card Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83570 | 7.8 | Oct 13 | Windows Search Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83568 | 7.8 | Oct 13 | Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83567 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
The 500 most important CVEs for this product (exploited first, then by severity)