W1
Product
Windows 11 26h2
On CISA KEVExploited in the wild
771
CVEs
1
On KEV
9.8
Max CVSS
771
New 30D
Severity mix
Critical 36High 464Medium 0Low 0
Watch
Add Windows 11 26h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102227 | 7.8 | Oct 13 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-97830 | 7.5 | Oct 13 | Windows Internet Information Services Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-103577 | 7.5 | Oct 13 | Microsoft QUIC Security Feature Bypass Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-103569 | 7.5 | Oct 13 | Windows IKE Extension Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-103558 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-97788 | 7.5 | Oct 13 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96071 | 7.5 | Oct 13 | Windows Media Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96325 | 7.5 | Oct 13 | Windows SMB Server Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83860 | 7.5 | Oct 13 | Windows GDI Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83795 | 7.5 | Oct 13 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70207 | 7.5 | Oct 13 | Network Policy Server (NPS) Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70006 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70004 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70012 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69998 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69992 | 7.5 | Oct 13 | Remote Desktop Services Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69994 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69991 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69996 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69997 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69995 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69987 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69988 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69986 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69984 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96246 | 7.5 | Oct 13 | Network Policy Server (NPS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96245 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70031 | 7.5 | Oct 13 | Windows iSCSI Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87716 | 7.5 | Oct 13 | Windows Storage Spaces Controller Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87713 | 7.5 | Oct 13 | Windows Bluetooth Port Driver Remote Code Execution Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85811 | 7.5 | Oct 13 | Network Policy Server (NPS) Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85808 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85797 | 7.5 | Oct 13 | Windows GDI Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85353 | 7.5 | Oct 13 | Windows Print Spooler Components Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85334 | 7.5 | Oct 13 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85322 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-84017 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70163 | 7.5 | Oct 13 | Microsoft OpenSSH for Windows Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83855 | 7.5 | Oct 13 | Windows WLAN Service Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83843 | 7.5 | Oct 13 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70133 | 7.5 | Oct 13 | Windows SMB Server Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70095 | 7.5 | Oct 13 | Windows iSCSI Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70014 | 7.5 | Oct 13 | Windows Cryptographic Services Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69976 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87705 | 7.4 | Oct 13 | Windows Hyper-V Security Feature Bypass Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85798 | 7.2 | Oct 13 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-108399 | 7.2 | Oct 13 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69452 | 7.1 | Oct 13 | Windows Enterprise App Management Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70126 | 7.1 | Oct 13 | Windows Bluetooth Port Driver Remote Code Execution Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-108135 | 7.0 | Oct 13 | Windows Backup Engine Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
The 500 most important CVEs for this product (exploited first, then by severity)