Microsoft Windows 11 version 26H1

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical12high5medium0low

updated 2026-10-28

vulnerabilities (280)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	—
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	—
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	—
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	no fix	2026-02-10	—
CVE-2026-21513US	—OT critical	15.9% (97th)	KEV	no fix	2026-02-10	—
CVE-2026-21525US	—OT critical	4.87% (92nd)	KEV	no fix	2026-02-10	—
CVE-2026-21519US	—OT critical	2.48% (84th)	KEV	no fix	2026-02-10	—
CVE-2026-41089US	—	79.6% (100th)	Exploit	no fix	2026-05-12	—
CVE-2026-24294US	—	4.85% (92nd)	Exploit	no fix	2026-03-10	—
CVE-2026-40369US	—	4.72% (92nd)	Exploit	no fix	2026-05-12	—
CVE-2026-33829US	—	3.51% (89th)	Exploit	no fix	2026-04-14	—
CVE-2026-24291US	—	3.30% (88th)	Exploit	no fix	2026-03-10	—
CVE-2026-41096US	—	2.70% (86th)	Exploit	no fix	2026-05-12	—
CVE-2026-25177US	—	1.33% (71st)	Exploit	no fix	2026-03-10	—
CVE-2026-21248US	—	1.33% (71st)	Exploit	no fix	2026-02-10	—
CVE-2026-21244US	—	1.33% (71st)	Exploit	no fix	2026-02-10	—
CVE-2026-21250US	—	1.11% (66th)	Exploit	no fix	2026-02-10	—
CVE-2026-25172US	—	0.94% (61st)	Exploit	no fix	2026-03-10	—
CVE-2026-33827US	—	0.84% (58th)	Exploit	no fix	2026-04-14	—
CVE-2026-26128US	—	0.65% (51st)	Exploit	no fix	2026-03-10	—
CVE-2026-33826US	—	0.53% (45th)	Exploit	no fix	2026-04-14	—
CVE-2026-32223US	—	0.52% (44th)	Exploit	no fix	2026-04-14	—
CVE-2026-21508US	high7.0	0.45% (39th)	Exploit	no fix	2026-02-10	—
CVE-2026-26179US	—	0.44% (38th)	Exploit	no fix	2026-04-14	—
CVE-2026-27912US	—	0.41% (35th)	Exploit	no fix	2026-04-14	—
CVE-2026-34344US	—	0.31% (24th)	Exploit	no fix	2026-05-12	—
CVE-2026-25250US	—	0.12% (2nd)	Exploit	no fix	2026-08-27	—
CVE-2026-21249US	—	11.4% (96th)	—	no fix	2026-02-10	—
CVE-2026-21527US	—OT elevated	8.26% (95th)	—	no fix	2026-02-10	—
CVE-2026-24289US	—	4.59% (92nd)	—	no fix	2026-03-10	—
CVE-2026-23668US	—	3.70% (90th)	—	no fix	2026-03-10	—
CVE-2026-21238US	—	3.38% (89th)	—	no fix	2026-02-10	—
CVE-2026-25187US	—	3.23% (88th)	—	no fix	2026-03-10	—
CVE-2026-40398US	—	2.67% (86th)	—	no fix	2026-05-12	—
CVE-2026-21241US	—	2.60% (85th)	—	no fix	2026-02-10	—
CVE-2026-21231US	—	2.56% (85th)	—	no fix	2026-02-10	—
CVE-2026-27914US	—	2.43% (84th)	—	no fix	2026-04-14	—
CVE-2026-26169US	—	2.31% (83rd)	—	no fix	2026-04-14	—
CVE-2026-33835US	—	2.12% (82nd)	—	no fix	2026-05-12	—
CVE-2026-26132US	—	2.05% (81st)	—	no fix	2026-03-10	—
CVE-2026-33840US	—	2.01% (81st)	—	no fix	2026-05-12	—
CVE-2026-32162US	—	1.92% (80th)	—	no fix	2026-04-14	—
CVE-2026-33837US	—	1.84% (79th)	—	no fix	2026-05-12	—
CVE-2026-27909US	—	1.77% (78th)	—	no fix	2026-04-14	—
CVE-2026-25166US	—	1.69% (77th)	—	no fix	2026-03-10	—
CVE-2026-35416US	—	1.65% (76th)	—	no fix	2026-05-12	—
CVE-2026-27908US	—	1.55% (75th)	—	no fix	2026-04-14	—
CVE-2026-25181US	—	1.47% (74th)	—	no fix	2026-03-10	—
CVE-2026-21243US	—	1.43% (73rd)	—	no fix	2026-02-10	—
CVE-2026-20846US	—	1.43% (73rd)	—	no fix	2026-02-10	—

showing 50 of 280

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free87 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')49 CVEs
CWE-122Heap-based Buffer Overflow37 CVEs
CWE-125Out-of-bounds Read17 CVEs
CWE-476NULL Pointer Dereference14 CVEs
CWE-415Double Free11 CVEs
CWE-20Improper Input Validation10 CVEs
CWE-284Improper Access Control10 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)280 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan