W1
Product
Windows 11 26h2
On CISA KEVExploited in the wild
971
CVEs
1
On KEV
9.8
Max CVSS
971
New 30D
Severity mix
Critical 43High 457Medium 0Low 0
Watch
Add Windows 11 26h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-97794 | 7.8 | Oct 13 | Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96108 | 7.8 | Oct 13 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96928 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96920 | 7.8 | Oct 13 | Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96867 | 7.8 | Oct 13 | Windows NTFS Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96856 | 7.8 | Oct 13 | Windows Management Instrumentation Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96862 | 7.8 | Oct 13 | Windows Spaceport.sys Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96318 | 7.8 | Oct 13 | Windows Resume Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96317 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96312 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96309 | 7.8 | Oct 13 | Windows Subsystem for Linux Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96308 | 7.8 | Oct 13 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96306 | 7.8 | Oct 13 | Windows Sysmain Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96244 | 7.8 | Oct 13 | Windows Internal System User Profile Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96223 | 7.8 | Oct 13 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96220 | 7.8 | Oct 13 | Windows Assigned Access Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96217 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70109 | 7.8 | Oct 13 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70092 | 7.8 | Oct 13 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70110 | 7.8 | Oct 13 | Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70131 | 7.8 | Oct 13 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70102 | 7.8 | Oct 13 | Windows Spaceport.sys Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70008 | 7.8 | Oct 13 | Windows IP Over USB Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70113 | 7.8 | Oct 13 | Windows Client for NFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69949 | 7.8 | Oct 13 | Windows Client for NFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69923 | 7.8 | Oct 13 | Windows AI Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88143 | 7.8 | Oct 13 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88100 | 7.8 | Oct 13 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88074 | 7.8 | Oct 13 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88073 | 7.8 | Oct 13 | Windows Graphics Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88071 | 7.8 | Oct 13 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88070 | 7.8 | Oct 13 | Windows BitLocker Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87712 | 7.8 | Oct 13 | Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87691 | 7.8 | Oct 13 | Windows Management Services Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85945 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85933 | 7.8 | Oct 13 | Windows Print Spooler Components Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85867 | 7.8 | Oct 13 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70303 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70238 | 7.8 | Oct 13 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70172 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70052 | 7.8 | Oct 13 | Microsoft PowerShell Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70048 | 7.8 | Oct 13 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69934 | 7.8 | Oct 13 | Windows Spaceport.sys Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69916 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88168 | 7.8 | Oct 13 | Windows Bind Filter Driver Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88101 | 7.8 | Oct 13 | Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88091 | 7.8 | Oct 13 | Windows Management Instrumentation Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87711 | 7.8 | Oct 13 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-88080 | 7.8 | Oct 13 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85927 | 7.8 | Oct 13 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
The 500 most important CVEs for this product (exploited first, then by severity)