W1
Product
Windows 11 26h2
On CISA KEVExploited in the wild
963
CVEs
1
On KEV
9.8
Max CVSS
963
New 30D
Severity mix
Critical 42High 458Medium 0Low 0
Watch
Add Windows 11 26h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-70286 | 7.8 | Oct 13 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70222 | 7.8 | Oct 13 | Windows Shell Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70151 | 7.8 | Oct 13 | Windows Direct Composition Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83896 | 7.8 | Oct 13 | Windows Direct Composition Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83902 | 7.8 | Oct 13 | Windows Direct Composition Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83867 | 7.8 | Oct 13 | Windows Push Notifications Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83882 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83876 | 7.8 | Oct 13 | Windows Shell Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83872 | 7.8 | Oct 13 | Windows TCP/IP Local Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83848 | 7.8 | Oct 13 | Windows COM+ Event System Service Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83847 | 7.8 | Oct 13 | Microsoft Account Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83836 | 7.8 | Oct 13 | Windows Event Tracing Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83833 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83832 | 7.8 | Oct 13 | Windows Spaceport.sys Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83828 | 7.8 | Oct 13 | Windows MIDI Service Module Elevation of Privileges Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83826 | 7.8 | Oct 13 | Windows Error Reporting Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83796 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83768 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83758 | 7.8 | Oct 13 | Windows Error Reporting Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83761 | 7.8 | Oct 13 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83753 | 7.8 | Oct 13 | Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83727 | 7.8 | Oct 13 | Windows Overlay Filter Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83726 | 7.8 | Oct 13 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83712 | 7.8 | Oct 13 | Windows NTFS Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83704 | 7.8 | Oct 13 | Microsoft Windows Search Component Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83700 | 7.8 | Oct 13 | Windows Now Playing Session Manager Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83692 | 7.8 | Oct 13 | Windows Bind Filter Driver Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83691 | 7.8 | Oct 13 | Windows DHCP Server Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83690 | 7.8 | Oct 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83678 | 7.8 | Oct 13 | Windows TCP/IP Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83669 | 7.8 | Oct 13 | Windows Error Reporting Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83654 | 7.8 | Oct 13 | Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83652 | 7.8 | Oct 13 | Windows NTFS Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83650 | 7.8 | Oct 13 | Windows Media Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83641 | 7.8 | Oct 13 | Windows Media Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83583 | 7.8 | Oct 13 | Windows Geotag Broker Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69882 | 7.8 | Oct 13 | Windows Update Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69718 | 7.8 | Oct 13 | Windows Update Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69673 | 7.8 | Oct 13 | Windows Update Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69633 | 7.8 | Oct 13 | Windows Update Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69650 | 7.8 | Oct 13 | Windows Key Distribution Center Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70580 | 7.8 | Oct 13 | Windows Credential Guard Spoofing Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-68836 | 7.8 | Oct 13 | Windows kernel32.dll Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70285 | 7.8 | Oct 13 | Windows Win32k Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70278 | 7.8 | Oct 13 | Microsoft Windows Media Foundation Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70274 | 7.8 | Oct 13 | Windows Bind Filter Driver Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70255 | 7.8 | Oct 13 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70225 | 7.8 | Oct 13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70218 | 7.8 | Oct 13 | Windows StateRepository API Elevation of Privilege Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70247 | 7.8 | Oct 13 | HTTP.sys Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
The 500 most important CVEs for this product (exploited first, then by severity)