Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Microsoft
Windows 11 Version 26h1

Microsoft Windows 11 version 26H1 Vulnerabilities: CVEs, CISA KEV & Security Advisories

242 CVEs

6 in CISA KEV

Microsoft Windows 11 version 26H1 Vulnerabilities

CVE security advisories and vulnerability history for Windows 11 version 26H1 by Microsoft.

242

Total CVEs

Published

6

In CISA KEV

Exploited in the wild

11

Public exploits

With known exploit

7.3

Avg CVSS

2026–2026

Last updated May 19, 2026

Overview

Microsoft Windows 11 version 26H1 has 242 published CVE records since 2026, of which 6 are in CISA's Known Exploited Vulnerabilities catalog and 11 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Microsoft Windows 11 version 26H1, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include ARM64-based Systems, x64-based Systems.

Severity and exploitation

How the CVSS severity of Microsoft Windows 11 version 26H1's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High194

Medium45

Low1

In CISA’s Known Exploited Vulnerabilities catalog

6

6 of Microsoft Windows 11 version 26H1's CVEs are confirmed exploited in the wild.

Public exploits

11

11 of Microsoft Windows 11 version 26H1's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Microsoft Windows 11 version 26H1 version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

10.0.28000.1836117 CVEs
10.0.28000.211359 CVEs
10.0.28000.171940 CVEs
10.0.28000.157525 CVEs

Find a version

242 CVEs

Sort

Windows BitLocker Security Feature Bypass Vulnerability
CVE-2026-45585
Public exploit
Patch
CWE-77
Medium · CVSS 6.8
EPSS 0.1% (30th pct)2026-05-19
Secure Boot Security Feature Bypass Vulnerability
CVE-2026-41097
Patch
CWE-1329
Medium · CVSS 6.7
EPSS 0.3% (49th pct)2026-05-12
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40413
Patch
CWE-476
High · CVSS 7.4
EPSS 0.1% (34th pct)2026-05-12
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2026-40403
Patch
CWE-122
High · CVSS 8.8
EPSS 0.0% (4th pct)2026-05-12
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40401
Patch
CWE-476
High · CVSS 7.1
EPSS 0.0% (16th pct)2026-05-12
Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVE-2026-40398
Patch
CWE-122
High · CVSS 7.8
EPSS 0.0% (6th pct)2026-05-12
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
CVE-2026-32209
Patch
CWE-284
Medium · CVSS 4.4
EPSS 0.0% (13th pct)2026-05-12
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-40397
Patch
CWE-191
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-05-12
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-40382
Patch
CWE-416
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12
Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-40369
Patch
CWE-822
High · CVSS 7.8
EPSS 0.0% (3th pct)2026-05-12
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
CVE-2026-34341
Patch
CWE-415
High · CVSS 7.0
EPSS 0.0% (14th pct)2026-05-12
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2026-34340
Patch
CWE-416
High · CVSS 7.0
EPSS 0.0% (14th pct)2026-05-12
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2026-34339
Patch
CWE-476
Medium · CVSS 5.5
EPSS 0.0% (13th pct)2026-05-12
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-34338
Patch
CWE-416
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-34337
Patch
CWE-362
High · CVSS 7.8
EPSS 0.0% (13th pct)2026-05-12
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-34336
Patch
CWE-122
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12
Windows TCP/IP Elevation of Privilege Vulnerability
CVE-2026-34334
Patch
CWE-362
High · CVSS 7.8
EPSS 0.0% (13th pct)2026-05-12
Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2026-33838
Patch
CWE-415
High · CVSS 7.8
EPSS 0.1% (16th pct)2026-05-12
Windows TCP/IP Local Elevation of Privilege Vulnerability
CVE-2026-33837
Patch
CWE-122
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-05-12
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-33835
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-05-12
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-42896
Patch
CWE-190
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-05-12
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-42825
Patch
CWE-416
High · CVSS 7.0
EPSS 0.0% (14th pct)2026-05-12
Windows Rich Text Edit Elevation of Privilege Vulnerability
CVE-2026-32170
Patch
CWE-415
Medium · CVSS 6.7
EPSS 0.1% (17th pct)2026-05-12
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
CVE-2026-32161
Patch
CWE-362
High · CVSS 7.5
EPSS 0.1% (24th pct)2026-05-12
Windows DNS Client Remote Code Execution Vulnerability
CVE-2026-41096
Patch
CWE-122
Critical · CVSS 9.8
EPSS 0.0% (12th pct)2026-05-12
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-41088
Patch
CWE-73
High · CVSS 7.8
EPSS 0.1% (22th pct)2026-05-12
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2026-40415
Patch
CWE-416
High · CVSS 8.1
EPSS 0.1% (26th pct)2026-05-12
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40414
Patch
CWE-476
High · CVSS 7.4
EPSS 0.1% (34th pct)2026-05-12
Windows SMB Client Elevation of Privilege Vulnerability
CVE-2026-40410
Patch
CWE-416
High · CVSS 7.0
EPSS 0.0% (14th pct)2026-05-12
Windows WAN ARP Driver Elevation of Privilege Vulnerability
CVE-2026-40408
Patch
CWE-416
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12

Showing 30 of 242

Common weakness types

The CWE weakness categories most often found in Microsoft Windows 11 version 26H1 CVEs. Follow any weakness for its full explanation.

CWE-416Use After Free67 CVEs
CWE-122Heap-based Buffer Overflow29 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')24 CVEs
CWE-125Out-of-bounds Read13 CVEs
CWE-476NULL Pointer Dereference12 CVEs
CWE-415Double Free11 CVEs
CWE-284Improper Access Control9 CVEs
CWE-822Untrusted Pointer Dereference9 CVEs

Other Microsoft products

Browse vulnerabilities for other products by Microsoft.

windows10,259 CVEs windows server 20165,207 CVEs windows server 20194,709 CVEs windows 104,437 CVEs windows server 20124,219 CVEs windows server 20084,083 CVEs Windows Server 2019 (Server Core installation)3,456 CVEs Windows 10 Version 18093,187 CVEs

All Microsoft vulnerabilities

Frequently asked questions

Common questions about Microsoft Windows 11 version 26H1 vulnerabilities.

How many CVEs does Microsoft Windows 11 version 26H1 have?

Microsoft Windows 11 version 26H1 has 242 published CVE records since 2026.

How many Microsoft Windows 11 version 26H1 CVEs are in CISA KEV?

Yes — 6 of Microsoft Windows 11 version 26H1's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Microsoft Windows 11 version 26H1 vulnerabilities?

Yes — 11 of Microsoft Windows 11 version 26H1's CVEs have a known public exploit.

Which versions of Microsoft Windows 11 version 26H1 are affected?

4 distinct Microsoft Windows 11 version 26H1 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Microsoft Windows 11 version 26H1 CVEs?

Microsoft Windows 11 version 26H1's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-125 (Out-of-bounds Read).

How many critical Microsoft Windows 11 version 26H1 vulnerabilities are there?

Microsoft Windows 11 version 26H1 has 2 critical and 194 high-severity CVEs.

What is the average severity of Microsoft Windows 11 version 26H1 CVEs?

The average CVSS base score across Microsoft Windows 11 version 26H1's scored CVEs is 7.3.

References

All Microsoft vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Microsoft Windows 11 version 26H1 vulnerabilities

Monitor new Microsoft Windows 11 version 26H1 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References