W1
Product
Windows 11 26h2
On CISA KEVExploited in the wild
971
CVEs
1
On KEV
9.8
Max CVSS
971
New 30D
Severity mix
Critical 43High 457Medium 0Low 0
Watch
Add Windows 11 26h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103569 | 7.5 | Oct 13 | Windows IKE Extension Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-103558 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-97788 | 7.5 | Oct 13 | Active Directory Federation Services (AD FS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96071 | 7.5 | Oct 13 | Windows Media Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96325 | 7.5 | Oct 13 | Windows SMB Server Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83860 | 7.5 | Oct 13 | Windows GDI Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83795 | 7.5 | Oct 13 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83739 | 7.5 | Oct 13 | Windows Bluetooth Service Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83677 | 7.5 | Oct 13 | Windows DHCP Client Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83670 | 7.5 | Oct 13 | Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83651 | 7.5 | Oct 13 | Windows GDI Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83647 | 7.5 | Oct 13 | Windows Active Directory Domain Services Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70207 | 7.5 | Oct 13 | Network Policy Server (NPS) Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70006 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70004 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70012 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69998 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69992 | 7.5 | Oct 13 | Remote Desktop Services Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69994 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69991 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69996 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69997 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69995 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69987 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69988 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69986 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69984 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96246 | 7.5 | Oct 13 | Network Policy Server (NPS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-96245 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70031 | 7.5 | Oct 13 | Windows iSCSI Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87716 | 7.5 | Oct 13 | Windows Storage Spaces Controller Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-87713 | 7.5 | Oct 13 | Windows Bluetooth Port Driver Remote Code Execution Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85811 | 7.5 | Oct 13 | Network Policy Server (NPS) Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85808 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85797 | 7.5 | Oct 13 | Windows GDI Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85353 | 7.5 | Oct 13 | Windows Print Spooler Components Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85334 | 7.5 | Oct 13 | Windows Message Queuing Queue Manager Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-85322 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-84017 | 7.5 | Oct 13 | Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70163 | 7.5 | Oct 13 | Microsoft OpenSSH for Windows Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83855 | 7.5 | Oct 13 | Windows WLAN Service Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83843 | 7.5 | Oct 13 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83754 | 7.5 | Oct 13 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83655 | 7.5 | Oct 13 | Network Policy Server (NPS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83515 | 7.5 | Oct 13 | RPC Runtime Information Disclosure Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-83516 | 7.5 | Oct 13 | Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70133 | 7.5 | Oct 13 | Windows SMB Server Denial of Service Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70095 | 7.5 | Oct 13 | Windows iSCSI Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-70014 | 7.5 | Oct 13 | Windows Cryptographic Services Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
| CVE-2026-69976 | 7.5 | Oct 13 | Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26300.9711; before 10.0.26300.9711 |
The 500 most important CVEs for this product (exploited first, then by severity)