W1
Product
Windows 11 Version 26H2
On CISA KEVExploited in the wild
1,007
CVEs
1
On KEV
9.8
Max CVSS
1007
New 30D
Severity mix
Critical 44High 456Medium 0Low 0
Watch
Add Windows 11 Version 26H2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-69953 | 7.8 | Oct 13 | Windows Overlay Filter Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69952 | 7.8 | Oct 13 | Windows Overlay Filter Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69950 | 7.8 | Oct 13 | Windows Overlay Filter Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69942 | 7.8 | Oct 13 | Windows Overlay Filter Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69918 | 7.8 | Oct 13 | Windows Core Messaging Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69909 | 7.8 | Oct 13 | Microsoft COM for Windows Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69926 | 7.8 | Oct 13 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69850 | 7.8 | Oct 13 | Windows Certificates Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69867 | 7.8 | Oct 13 | SQLite Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-61931 | 7.8 | Oct 13 | Windows Perception Simulation Service Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-70566 | 7.8 | Oct 13 | Windows Schannel Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-49785 | 7.8 | Oct 13 | UEFI Secure Boot Security Feature Bypass Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69898 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-97800 | 7.8 | Oct 13 | Windows Mobile Broadband Elevation of Privilege Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-102227 | 7.8 | Oct 13 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-108131 | 7.5 | Oct 13 | Active Directory Federation Services (AD FS) Spoofing Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-97830 | 7.5 | Oct 13 | Windows Internet Information Services Denial of Service Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-103577 | 7.5 | Oct 13 | Microsoft QUIC Security Feature Bypass Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-103569 | 7.5 | Oct 13 | Windows IKE Extension Information Disclosure Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-103558 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-97788 | 7.5 | Oct 13 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-96071 | 7.5 | Oct 13 | Windows Media Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-96325 | 7.5 | Oct 13 | Windows SMB Server Denial of Service Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-83860 | 7.5 | Oct 13 | Windows GDI Denial of Service Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-83795 | 7.5 | Oct 13 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-83739 | 7.5 | Oct 13 | Windows Bluetooth Service Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-83677 | 7.5 | Oct 13 | Windows DHCP Client Denial of Service Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-83670 | 7.5 | Oct 13 | Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-83647 | 7.5 | Oct 13 | Windows Active Directory Domain Services Denial of Service Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-70207 | 7.5 | Oct 13 | Network Policy Server (NPS) Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-70006 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-70004 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-70012 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69998 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69992 | 7.5 | Oct 13 | Remote Desktop Services Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69994 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69991 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69996 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69997 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69995 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69987 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69988 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69986 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-69984 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-97789 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-96246 | 7.5 | Oct 13 | Network Policy Server (NPS) Information Disclosure Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-96245 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-70031 | 7.5 | Oct 13 | Windows iSCSI Denial of Service Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-87716 | 7.5 | Oct 13 | Windows Storage Spaces Controller Denial of Service Vulnerability Affected: 10.0.26300.0 before 10.0.26300.9711 |
| CVE-2026-87713 | 7.5 | Oct 13 | Windows Bluetooth Port Driver Remote Code Execution Affected: 10.0.26300.0 before 10.0.26300.9711 |
The 500 most important CVEs for this product (exploited first, then by severity)