Windows 11 26h1
by Microsoft
CVEs (900)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-66804 | Hig | 0.51 | 7.8 | 0.03 | Aug 11, 2026 | Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-66799 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65814 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65790 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65787 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65786 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65775 | Hig | 0.51 | 7.8 | 0.02 | Aug 11, 2026 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65773 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65672 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65671 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62894 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62890 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. | ||
| CVE-2026-62888 | Hig | 0.51 | 7.8 | 0.02 | Aug 11, 2026 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62885 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62880 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62877 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62876 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62832 | Hig | 0.51 | 7.8 | 0.02 | Aug 11, 2026 | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62811 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62799 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally. |
- risk 0.51cvss 7.8epss 0.03
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.02
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.02
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.02
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
Page 4 of 45