Microsoft Corp Windows 11 26H1

Name: Microsoft Corp Windows 11 26H1
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

37critical212high23medium1low

updated 2026-10-27

vulnerabilities (837)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	≤ 10.0.28000.1836
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	≤ 10.0.28000.1836
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	≤ 10.0.28000.1575
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	no fix	2026-02-10	≤ 10.0.28000.1575
CVE-2026-81963US	high7.8OT critical	0.39% (33rd)	KEV	no fix	2026-09-08	≤ 10.0.28000.2954
CVE-2026-68820US	—OT critical	0.33% (26th)	KEV	no fix	2026-08-11	≤ 10.0.28000.2704
CVE-2026-21513US	—OT critical	15.9% (97th)	KEV	no fix	2026-02-10	≤ 10.0.28000.1575
CVE-2026-96951US	high8.8OT critical	9.81% (96th)	KEV	no fix	2026-10-13	≤ 10.0.28000.3231
CVE-2026-21525US	—OT critical	4.87% (92nd)	KEV	no fix	2026-02-10	≤ 10.0.28000.1575
CVE-2026-21519US	—OT critical	2.48% (84th)	KEV	no fix	2026-02-10	≤ 10.0.28000.1575
CVE-2026-49160US	—	56.6% (99th)	Exploit	no fix	2026-06-09	≤ 10.0.28000.2269
CVE-2026-42980US	—	6.95% (94th)	Exploit	no fix	2026-06-09	≤ 10.0.28000.2269
CVE-2026-24294US	—	4.85% (92nd)	Exploit	no fix	2026-03-10	≤ 10.0.28000.1719
CVE-2026-40369US	—	4.72% (92nd)	Exploit	no fix	2026-05-12	≤ 10.0.28000.2113
CVE-2026-33829US	—	3.51% (89th)	Exploit	no fix	2026-04-14	≤ 10.0.28000.1836
CVE-2026-24291US	—	3.30% (88th)	Exploit	no fix	2026-03-10	≤ 10.0.28000.1719
CVE-2026-41096US	—	2.70% (86th)	Exploit	no fix	2026-05-12	≤ 10.0.28000.2113
CVE-2026-45585US	—	1.89% (79th)	Exploit	no fix	2026-05-20	≤ 10.0.28000.2269
CVE-2026-25177US	—	1.33% (71st)	Exploit	no fix	2026-03-10	≤ 10.0.28000.1719
CVE-2026-21248US	—	1.33% (71st)	Exploit	no fix	2026-02-10	≤ 10.0.28000.1575
CVE-2026-21244US	—	1.33% (71st)	Exploit	no fix	2026-02-10	≤ 10.0.28000.1575
CVE-2026-21250US	—	1.11% (66th)	Exploit	no fix	2026-02-10	≤ 10.0.28000.1575
CVE-2026-34348US	—	1.00% (62nd)	Exploit	no fix	2026-07-14	2 versions
CVE-2026-56190US	—	0.97% (62nd)	Exploit	no fix	2026-07-14	≤ 10.0.28000.2525
CVE-2026-49179US	—	0.86% (58th)	Exploit	no fix	2026-08-11	≤ 10.0.28000.2704
CVE-2026-33827US	—	0.84% (58th)	Exploit	no fix	2026-04-14	≤ 10.0.28000.1836
CVE-2026-50369US	—	0.70% (53rd)	Exploit	no fix	2026-07-14	2 versions
CVE-2026-26128US	—	0.65% (51st)	Exploit	no fix	2026-03-10	≤ 10.0.28000.1719
CVE-2026-32223US	—	0.52% (44th)	Exploit	no fix	2026-04-14	≤ 10.0.28000.1836
CVE-2026-54984US	—	0.47% (40th)	Exploit	no fix	2026-08-11	≤ 10.0.28000.2704
CVE-2026-50416US	low3.3	0.46% (40th)	Exploit	no fix	2026-07-14	≤ 10.0.28000.2525
CVE-2026-69328US	high7.8	0.46% (39th)	Exploit	no fix	2026-09-08	≤ 10.0.28000.2954
CVE-2026-21508US	high7.0	0.45% (39th)	Exploit	no fix	2026-02-10	≤ 10.0.28000.1575
CVE-2026-26179US	—	0.44% (38th)	Exploit	no fix	2026-04-14	≤ 10.0.28000.1836
CVE-2026-54992US	high7.8	0.34% (27th)	Exploit	no fix	2026-07-14	≤ 10.0.28000.2525
CVE-2026-62737US	—	0.33% (26th)	Exploit	no fix	2026-08-11	≤ 10.0.28000.2704
CVE-2026-62735US	—	0.33% (26th)	Exploit	no fix	2026-08-11	≤ 10.0.28000.2704
CVE-2026-49176US	—	0.33% (26th)	Exploit	no fix	2026-07-14	2 versions
CVE-2026-58635US	—	0.32% (25th)	Exploit	no fix	2026-07-14	≤ 10.0.28000.2525
CVE-2026-34344US	—	0.31% (24th)	Exploit	no fix	2026-05-12	≤ 10.0.28000.2113
CVE-2026-83991US	medium5.5OT elevated	0.30% (23rd)	Exploit	no fix	2026-09-08	≤ 10.0.28000.2954
CVE-2026-66804US	—	0.30% (22nd)	Exploit	no fix	2026-08-11	≤ 10.0.28000.2704
CVE-2026-50343US	—	0.30% (22nd)	Exploit	no fix	2026-07-14	2 versions
CVE-2026-42978US	—	0.25% (16th)	Exploit	no fix	2026-06-09	≤ 10.0.28000.2269
CVE-2026-54107US	high7.0	0.21% (12th)	Exploit	no fix	2026-07-14	≤ 10.0.28000.2525
CVE-2026-25250US	—	0.12% (2nd)	Exploit	no fix	2026-08-27	≤ 10.0.28000.1836
CVE-2026-8863US	—	0.11% (1st)	Exploit	no fix	2026-06-09	≤ 10.0.28000.2269
CVE-2026-47291US	—	25.3% (98th)	—	no fix	2026-06-09	≤ 10.0.28000.2269
CVE-2026-45657US	—	15.5% (97th)	—	no fix	2026-06-09	≤ 10.0.28000.2269
CVE-2026-21249US	—	11.4% (96th)	—	no fix	2026-02-10	≤ 10.0.28000.1575

showing 50 of 837

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free239 CVEs
CWE-122Heap-based Buffer Overflow234 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')108 CVEs
CWE-125Out-of-bounds Read65 CVEs
CWE-190Integer Overflow or Wraparound38 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor29 CVEs
CWE-284Improper Access Control23 CVEs
CWE-121Stack-based Buffer Overflow17 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)837 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan