microsoft / windows_11_26h1
1,009 known vulnerabilities in microsoft windows_11_26h1.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-50696 | Medium | 1.2% | 7.5 | Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allow… | |
| CVE-2026-54119 | Medium | 1.2% | 7.5 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directo… | |
| CVE-2026-54113 | Medium | 1.1% | 7.5 | Allocation of resources without limits or throttling in Windows Kernel allows an… | |
| CVE-2026-69428 | Medium | 1.1% | 7.5 | Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allow… | |
| CVE-2026-56186 | Medium | 1.1% | 8.1 | Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose… | |
| CVE-2026-44815 | Medium | 1.1% | 9.8 | Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attack… | |
| CVE-2026-50429 | Medium | 1.1% | 8.2 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose… | |
| CVE-2026-69525 | Medium | 1.0% | 9.8 | Use after free in Windows Remote Desktop Services allows an unauthorized attacke… | |
| CVE-2026-69829 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to e… | |
| CVE-2026-47302 | Medium | 1.0% | 7.5 | Allocation of resources without limits or throttling in .NET allows an unauthori… | |
| CVE-2026-48573 | Medium | 1.0% | 7.9 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to by… | |
| CVE-2026-48576 | Medium | 1.0% | 7.9 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to by… | |
| CVE-2026-50463 | Medium | 1.0% | 7.5 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose… | |
| CVE-2026-50470 | Medium | 1.0% | 7.5 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized … | |
| CVE-2026-69496 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized a… | |
| CVE-2026-42990 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized atta… | |
| CVE-2026-49172 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacke… | |
| CVE-2026-50447 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized att… | |
| CVE-2026-56190 | Medium | 1.0% | 9.8 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to … | |
| CVE-2026-69910 | Medium | 1.0% | 9.8 | Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker t… | |
| CVE-2026-50646 | Medium | 1.0% | 7.8 | Protection mechanism failure in .NET Framework allows an unauthorized attacker t… | |
| CVE-2026-47289 | Medium | 1.0% | 8.8 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac… | |
| CVE-2026-70296 | Medium | 1.0% | 9.8 | Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker… | |
| CVE-2026-77493 | Medium | 1.0% | 9.8 | Double free in Microsoft Graphics Component allows an unauthorized attacker to e… | |
| CVE-2026-50649 | Medium | 0.9% | 7.8 | Deserialization of untrusted data in .NET allows an unauthorized attacker to exe… | |
| CVE-2026-62784 | Medium | 0.9% | 8.8 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv)… | |
| CVE-2026-62800 | Medium | 0.9% | 8.8 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker t… | |
| CVE-2026-50682 | Medium | 0.9% | 7.1 | Out-of-bounds read in Windows Active Directory allows an authorized attacker to … | |
| CVE-2026-49178 | Medium | 0.9% | 8.8 | Heap-based buffer overflow in Active Directory Domain Services allows an authori… | |
| CVE-2026-50666 | Medium | 0.9% | 8.8 | Use after free in Windows Remote Access Connection Manager allows an authorized … | |
| CVE-2026-56194 | Medium | 0.9% | 8.8 | Heap-based buffer overflow in Windows Network File System allows an authorized a… | |
| CVE-2026-56647 | Medium | 0.9% | 8.8 | Integer overflow or wraparound in Windows Remote Access Service Infrastructure a… | |
| CVE-2026-57092 | Medium | 0.9% | 9.9 | Use after free in Windows VMSwitch allows an authorized attacker to elevate priv… | |
| CVE-2026-58626 | Medium | 0.9% | 8.8 | Use after free in Windows Remote Desktop Services allows an authorized attacker … | |
| CVE-2026-69463 | Medium | 0.9% | 9.8 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex… | |
| CVE-2026-69491 | Medium | 0.9% | 9.8 | Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthoriz… | |
| CVE-2026-73009 | Medium | 0.9% | 9.8 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unau… | |
| CVE-2026-42908 | Medium | 0.9% | 7.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose in… | |
| CVE-2026-45639 | Medium | 0.9% | 7.5 | Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose in… | |
| CVE-2026-83989 | Medium | 0.9% | 7.5 | Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unaut… | |
| CVE-2026-40400 | Medium | 0.9% | 8.0 | Relative path traversal in Windows PowerShell allows an authorized attacker to e… | |
| CVE-2026-70563 | Medium | 0.8% | 8.1 | Improper link resolution before file access ('link following') in Windows Shell … | |
| CVE-2026-70342 | Medium | 0.8% | 8.1 | Use after free in Windows Ancillary Function Driver for WinSock allows an unauth… | |
| CVE-2026-50527 | Medium | 0.8% | 7.5 | Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to… | |
| CVE-2026-50648 | Medium | 0.8% | 7.5 | Allocation of resources without limits or throttling in .NET Framework allows an… | |
| CVE-2026-33827 | Medium | 0.8% | 8.1 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-62785 | Medium | 0.8% | 8.8 | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protoc… | |
| CVE-2026-49179 | Medium | 0.8% | 8.8 | Improper neutralization of special elements used in a command ('command injectio… | |
| CVE-2026-50380 | Medium | 0.8% | 9.6 | Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to ex… | |
| CVE-2026-50474 | Medium | 0.8% | 8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execu… |