W1
Product
Windows 11 26h2
On CISA KEVExploited in the wild
771
CVEs
1
On KEV
9.8
Max CVSS
771
New 30D
Severity mix
Critical 36High 464Medium 0Low 0
Watch
Add Windows 11 26h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-69957 | 7.8 | Oct 13 | Windows Overlay Filter Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69953 | 7.8 | Oct 13 | Windows Overlay Filter Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69952 | 7.8 | Oct 13 | Windows Overlay Filter Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69950 | 7.8 | Oct 13 | Windows Overlay Filter Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69942 | 7.8 | Oct 13 | Windows Overlay Filter Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69918 | 7.8 | Oct 13 | Windows Core Messaging Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69909 | 7.8 | Oct 13 | Microsoft COM for Windows Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69926 | 7.8 | Oct 13 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69850 | 7.8 | Oct 13 | Windows Certificates Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-61931 | 7.8 | Oct 13 | Windows Perception Simulation Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70566 | 7.8 | Oct 13 | Windows Schannel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-49785 | 7.8 | Oct 13 | UEFI Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69898 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-97800 | 7.8 | Oct 13 | Windows Mobile Broadband Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-102227 | 7.8 | Oct 13 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-97830 | 7.5 | Oct 13 | Windows Internet Information Services Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-103577 | 7.5 | Oct 13 | Microsoft QUIC Security Feature Bypass Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-103569 | 7.5 | Oct 13 | Windows IKE Extension Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-103558 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-97788 | 7.5 | Oct 13 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96071 | 7.5 | Oct 13 | Windows Media Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96325 | 7.5 | Oct 13 | Windows SMB Server Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83860 | 7.5 | Oct 13 | Windows GDI Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83795 | 7.5 | Oct 13 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70207 | 7.5 | Oct 13 | Network Policy Server (NPS) Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70006 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70004 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70012 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69998 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69992 | 7.5 | Oct 13 | Remote Desktop Services Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69994 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69991 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69996 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69997 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69995 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69987 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69988 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69986 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69984 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96246 | 7.5 | Oct 13 | Network Policy Server (NPS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96245 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70031 | 7.5 | Oct 13 | Windows iSCSI Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87716 | 7.5 | Oct 13 | Windows Storage Spaces Controller Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87713 | 7.5 | Oct 13 | Windows Bluetooth Port Driver Remote Code Execution Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85811 | 7.5 | Oct 13 | Network Policy Server (NPS) Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85808 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85797 | 7.5 | Oct 13 | Windows GDI Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85353 | 7.5 | Oct 13 | Windows Print Spooler Components Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85334 | 7.5 | Oct 13 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85322 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
The 500 most important CVEs for this product (exploited first, then by severity)