Patch tracker / Products / Windows 11 version 26H1

Windows 11 version 26H1: vulnerabilities and security updates

Every CVE affecting Windows 11 version 26H1 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
2559
Updates (KBs)
10
Actively exploited (KEV)
10
Critical Severity
84

CVEs affecting Windows 11 version 26H1

CVESeverityCVSSEPSSStatus
CVE-2026-33824Critical9.877%KEV
CVE-2026-21513High8.861%KEV
CVE-2026-21510High8.861%KEV
CVE-2026-21519High7.861%KEV
CVE-2026-21533High7.861%KEV
CVE-2026-32202Medium4.371%KEV
CVE-2026-21525Medium6.261%KEV
CVE-2026-96951High8.89.8%KEV
CVE-2026-81963High7.82.8%KEV
CVE-2026-68820High7.01.2%KEV
CVE-2025-54518High9.880%-
CVE-2026-41096Critical9.880%-
CVE-2024-49123High8.184%-
CVE-2024-49132High8.184%-
CVE-2026-34329High8.880%-
CVE-2026-40403High8.880%-
CVE-2024-49075High7.584%-
CVE-2026-26167High8.877%-
CVE-2026-32157High8.877%-
CVE-2026-32225High8.877%-
CVE-2026-40415High8.180%-
CVE-2026-33834High7.880%-
CVE-2026-33835High7.880%-
CVE-2026-33837High7.880%-
CVE-2026-33838High7.880%-
CVE-2026-33840High7.880%-
CVE-2026-33841High7.880%-
CVE-2026-34330High7.880%-
CVE-2026-34333High7.880%-
CVE-2026-34334High7.880%-
CVE-2026-34336High7.880%-
CVE-2026-34337High7.880%-
CVE-2026-34338High7.880%-
CVE-2026-34343High7.880%-
CVE-2026-34344High7.880%-
CVE-2026-34351High7.880%-
CVE-2026-35415High7.880%-
CVE-2026-35417High7.880%-
CVE-2026-35418High7.880%-
CVE-2026-35421High7.880%-
CVE-2026-40369High7.880%-
CVE-2026-40377High7.880%-
CVE-2026-40382High7.880%-
CVE-2026-40397High7.880%-
CVE-2026-40398High7.880%-
CVE-2026-40399High7.880%-
CVE-2026-40407High7.880%-
CVE-2026-40408High7.880%-
CVE-2026-41088High7.880%-
CVE-2026-42896High7.880%-
CVE-2026-32091High8.477%-
CVE-2026-32162High8.477%-
CVE-2026-32221High8.477%-
CVE-2026-57092Critical9.971%-
CVE-2026-32161High7.580%-
CVE-2026-35424High7.580%-
CVE-2026-40405High7.580%-
CVE-2026-40406High7.580%-
CVE-2026-42990Critical9.871%-
CVE-2026-49172Critical9.871%-
CVE-2026-50447Critical9.871%-
CVE-2026-54990Critical9.871%-
CVE-2026-56188Critical9.871%-
CVE-2026-56190Critical9.871%-
CVE-2026-33827High8.177%-
CVE-2026-40413High7.480%-
CVE-2026-40414High7.480%-
CVE-2026-50380Critical9.671%-
CVE-2026-26153High7.877%-
CVE-2026-26156High7.877%-
CVE-2026-26159High7.877%-
CVE-2026-26160High7.877%-
CVE-2026-26161High7.877%-
CVE-2026-26162High7.877%-
CVE-2026-26163High7.877%-
CVE-2026-26168High7.877%-
CVE-2026-26170High7.877%-
CVE-2026-26172High7.877%-
CVE-2026-26176High7.877%-
CVE-2026-26179High7.877%-
CVE-2026-26180High7.877%-
CVE-2026-26181High7.877%-
CVE-2026-26184High7.877%-
CVE-2026-27907High7.877%-
CVE-2026-27909High7.877%-
CVE-2026-27910High7.877%-
CVE-2026-27911High7.877%-
CVE-2026-27914High7.877%-
CVE-2026-27915High7.877%-
CVE-2026-27916High7.877%-
CVE-2026-27918High7.877%-
CVE-2026-27919High7.877%-
CVE-2026-27920High7.877%-
CVE-2026-27923High7.877%-
CVE-2026-27927High7.877%-
CVE-2026-32069High7.877%-
CVE-2026-32074High7.877%-
CVE-2026-32076High7.877%-
CVE-2026-32077High7.877%-
CVE-2026-32078High7.877%-
CVE-2026-32089High7.877%-
CVE-2026-32090High7.877%-
CVE-2026-32152High7.877%-
CVE-2026-32153High7.877%-
CVE-2026-32154High7.877%-
CVE-2026-32158High7.877%-
CVE-2026-32159High7.877%-
CVE-2026-32160High7.877%-
CVE-2026-32163High7.877%-
CVE-2026-32164High7.877%-
CVE-2026-32165High7.877%-
CVE-2026-32183High7.877%-
CVE-2026-32222High7.877%-
CVE-2026-33098High7.877%-
CVE-2026-33101High7.877%-
CVE-2026-40401High7.180%-
CVE-2026-33839High7.080%-
CVE-2026-34331High7.080%-
CVE-2026-34340High7.080%-
CVE-2026-34341High7.080%-
CVE-2026-34342High7.080%-
CVE-2026-34345High7.080%-
CVE-2026-34347High7.080%-
CVE-2026-35416High7.080%-
CVE-2026-40410High7.080%-
CVE-2026-42825High7.080%-
CVE-2026-49798Critical9.371%-
CVE-2026-32071High7.577%-
CVE-2026-33096High7.577%-
CVE-2026-32156High7.477%-
CVE-2026-21530Medium6.780%-
CVE-2026-32170Medium6.780%-
CVE-2026-41097Medium6.780%-
CVE-2026-32149High7.377%-
CVE-2026-35422Medium6.580%-
CVE-2026-49178High8.871%-
CVE-2026-49795High8.871%-
CVE-2026-50342High8.871%-
CVE-2026-50360High8.871%-
CVE-2026-50369High8.871%-
CVE-2026-50382High8.871%-
CVE-2026-50385High8.871%-
CVE-2026-50398High8.871%-
CVE-2026-50413High8.871%-
CVE-2026-50474High8.871%-
CVE-2026-50477High8.871%-
CVE-2026-50489High8.871%-
CVE-2026-50666High8.871%-
CVE-2026-50670High8.871%-
CVE-2026-50687High8.871%-
CVE-2026-50692High8.871%-
CVE-2026-54107High8.871%-
CVE-2026-54982High8.871%-
CVE-2026-54999High8.871%-
CVE-2026-56194High8.871%-
CVE-2026-56647High8.871%-
CVE-2026-57087High8.871%-
CVE-2026-57090High8.871%-
CVE-2026-57094High8.871%-
CVE-2026-58534High8.871%-
CVE-2026-58594High8.871%-
CVE-2026-58608High8.871%-
CVE-2026-58626High8.871%-
CVE-2026-26151High7.177%-
CVE-2025-64720High7.177%-
CVE-2025-65018High7.177%-
CVE-2026-25184High7.077%-
CVE-2026-26152High7.077%-
CVE-2026-26165High7.077%-
CVE-2026-26166High7.077%-
CVE-2026-26173High7.077%-
CVE-2026-26174High7.077%-
CVE-2026-26177High7.077%-
CVE-2026-26182High7.077%-
CVE-2026-27908High7.077%-
CVE-2026-27917High7.077%-
CVE-2026-27921High7.077%-
CVE-2026-27922High7.077%-
CVE-2026-27926High7.077%-
CVE-2026-27929High7.077%-
CVE-2026-32068High7.077%-
CVE-2026-32070High7.077%-
CVE-2026-32073High7.077%-
CVE-2026-32075High7.077%-
CVE-2026-32082High7.077%-
CVE-2026-32083High7.077%-
CVE-2026-32086High7.077%-
CVE-2026-32087High7.077%-
CVE-2026-32093High7.077%-
CVE-2026-32150High7.077%-
CVE-2026-32195High7.077%-
CVE-2026-32219High7.077%-
CVE-2026-32224High7.077%-
CVE-2026-33100High7.077%-
CVE-2026-33104High7.077%-
CVE-2026-40380Medium6.280%-
CVE-2026-50340High8.571%-
CVE-2026-32223Medium6.877%-
CVE-2025-21330High7.574%-
CVE-2026-49184High8.471%-
CVE-2026-54122High8.471%-
CVE-2026-54128High8.471%-
CVE-2026-54992High8.471%-
CVE-2026-56181High8.371%-
CVE-2026-50429High8.271%-
CVE-2026-50680High8.271%-
CVE-2026-26155Medium6.577%-
CVE-2026-27925Medium6.577%-
CVE-2026-32151Medium6.577%-
CVE-2026-42900High8.171%-
CVE-2026-49164High8.171%-
CVE-2026-50439High8.171%-
CVE-2026-50460High8.171%-
CVE-2026-50487High8.171%-
CVE-2026-50686High8.171%-
CVE-2026-50694High8.171%-
CVE-2026-54995High8.171%-
CVE-2026-56186High8.171%-
CVE-2026-40400High8.071%-
CVE-2026-42975High8.071%-
CVE-2026-50365High8.071%-
CVE-2026-50502High8.071%-
CVE-2026-32072Medium6.277%-
CVE-2026-48566Medium5.580%-
CVE-2026-34339Medium5.580%-
CVE-2026-35419Medium5.580%-
CVE-2026-42982High7.871%-
CVE-2026-44800High7.871%-
CVE-2026-49166High7.871%-
CVE-2026-49170High7.871%-
CVE-2026-49173High7.871%-
CVE-2026-49175High7.871%-
CVE-2026-49176High7.871%-
CVE-2026-49783High7.871%-
CVE-2026-49792High7.871%-
CVE-2026-49793High7.871%-
CVE-2026-49796High7.871%-
CVE-2026-49797High7.871%-
CVE-2026-49800High7.871%-
CVE-2026-49808High7.871%-
CVE-2026-50293High7.871%-
CVE-2026-50305High7.871%-
CVE-2026-50306High7.871%-
CVE-2026-50308High7.871%-
CVE-2026-50309High7.871%-
CVE-2026-50311High7.871%-
CVE-2026-50313High7.871%-
CVE-2026-50315High7.871%-
CVE-2026-50317High7.871%-
CVE-2026-50318High7.871%-

Showing the 250 highest-risk of 2559 CVEs. See all in the CVE reference.

Updates (KBs) for Windows 11 version 26H1

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50837682026-04-14Critical9.877%119KEV
KB51016492026-07-14Critical9.971%382KEV
KB50771792026-02-10High8.861%26KEV
KB51276462026-10-13Critical9.89.8%997KEV
KB51240122026-09-08Critical9.82.8%624KEV
KB51210002026-08-11Critical9.81.2%191KEV
KB50950512026-06-09Critical9.857%123-
KB50895482026-05-12Critical9.84.7%62-
KB50794662026-03-10High8.84.9%40-
KB51291942026-08-11High8.20.4%2-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5122876 install notes and severity KB5126052: the full CVE list KB5129238: the full CVE list KB5126651 download and what it fixes KB5122882: the full CVE list KB5129235: the full CVE list KB5126655: patch details KB5126657 install notes and severity KB5123099 install notes and severity KB5122871 install notes and severity
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.