Windows 11 26h2
by Microsoft
CVEs (26)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-96951 | Hig | 0.69 | 8.8 | 0.02 | KEV | Oct 13, 2026 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | |
| CVE-2026-97830 | Hig | 0.49 | 7.5 | 0.01 | Oct 13, 2026 | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. | ||
| CVE-2026-97844 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97843 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97842 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97841 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97840 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97839 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97838 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97837 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97836 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97835 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97834 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97833 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97832 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97831 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97829 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97828 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97827 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-97826 | Med | 0.42 | 6.5 | 0.01 | Oct 13, 2026 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
- risk 0.69cvss 8.8epss 0.02
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.49cvss 7.5epss 0.01
Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Page 1 of 2