Windows 11 26h1

Source repositories

https://github.com/blackarrowsec/redteam-research

CVEs (115)

CVE	Sev	Risk	CVSS	Published	Description
CVE-2026-33824	Cri	0.64	9.8	Apr 14, 2026	Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
CVE-2026-32225	Hig	0.57	8.8	Apr 14, 2026	Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-32157	Hig	0.57	8.8	Apr 14, 2026	Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-26167	Hig	0.57	8.8	Apr 14, 2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-32221	Hig	0.55	8.4	Apr 14, 2026	Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
CVE-2026-32162	Hig	0.55	8.4	Apr 14, 2026	Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally.
CVE-2026-32091	Hig	0.55	8.4	Apr 14, 2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
CVE-2026-33827	Hig	0.53	8.1	Apr 14, 2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-33101	Hig	0.51	7.8	Apr 14, 2026	Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-33098	Hig	0.51	7.8	Apr 14, 2026	Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-32222	Hig	0.51	7.8	Apr 14, 2026	Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-32183	Hig	0.51	7.8	Apr 14, 2026	Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.
CVE-2026-32165	Hig	0.51	7.8	Apr 14, 2026	Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
CVE-2026-32164	Hig	0.51	7.8	Apr 14, 2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
CVE-2026-32163	Hig	0.51	7.8	Apr 14, 2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows User Interface Core allows an authorized attacker to elevate privileges locally.
CVE-2026-32160	Hig	0.51	7.8	Apr 14, 2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-32159	Hig	0.51	7.8	Apr 14, 2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-32158	Hig	0.51	7.8	Apr 14, 2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-32153	Hig	0.51	7.8	Apr 14, 2026	Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
CVE-2026-32090	Hig	0.51	7.8	Apr 14, 2026	Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.