Patch tracker / Products / Windows 11 version 26H1

Windows 11 version 26H1: vulnerabilities and security updates

Every CVE affecting Windows 11 version 26H1 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
172
Updates (KBs)
11
Actively exploited (KEV)
1
Critical Severity
20

CVEs affecting Windows 11 version 26H1

CVESeverityCVSSEPSSStatus
CVE-2026-33824Critical9.873%KEV
CVE-2026-20806Critical9.873%-
CVE-2026-20928Critical9.873%-
CVE-2026-26175Critical9.873%-
CVE-2026-27906Critical9.873%-
CVE-2026-27930Critical9.873%-
CVE-2026-27931Critical9.873%-
CVE-2026-32079Critical9.873%-
CVE-2026-32081Critical9.873%-
CVE-2026-32084Critical9.873%-
CVE-2026-32085Critical9.873%-
CVE-2026-32181Critical9.873%-
CVE-2026-32212Critical9.873%-
CVE-2026-32214Critical9.873%-
CVE-2026-32215Critical9.873%-
CVE-2026-32217Critical9.873%-
CVE-2026-32218Critical9.873%-
CVE-2026-33829Critical9.873%-
CVE-2026-32216Critical9.873%-
CVE-2026-32220Critical9.873%-
CVE-2026-26167High8.873%-
CVE-2026-26178High8.873%-
CVE-2026-32157High8.873%-
CVE-2026-32225High8.873%-
CVE-2026-27928High8.773%-
CVE-2026-32091High8.473%-
CVE-2026-32162High8.473%-
CVE-2026-32221High8.473%-
CVE-2026-33827High8.173%-
CVE-2026-27912High8.073%-
CVE-2026-33826High8.073%-
CVE-2026-20930High7.873%-
CVE-2026-26153High7.873%-
CVE-2026-26156High7.873%-
CVE-2026-26159High7.873%-
CVE-2026-26160High7.873%-
CVE-2026-26161High7.873%-
CVE-2026-26162High7.873%-
CVE-2026-26163High7.873%-
CVE-2026-26168High7.873%-
CVE-2026-26170High7.873%-
CVE-2026-26172High7.873%-
CVE-2026-26176High7.873%-
CVE-2026-26179High7.873%-
CVE-2026-26180High7.873%-
CVE-2026-26181High7.873%-
CVE-2026-26184High7.873%-
CVE-2026-27907High7.873%-
CVE-2026-27909High7.873%-
CVE-2026-27910High7.873%-
CVE-2026-27911High7.873%-
CVE-2026-27914High7.873%-
CVE-2026-27915High7.873%-
CVE-2026-27916High7.873%-
CVE-2026-27918High7.873%-
CVE-2026-27919High7.873%-
CVE-2026-27920High7.873%-
CVE-2026-27923High7.873%-
CVE-2026-27924High7.873%-
CVE-2026-27927High7.873%-
CVE-2026-32069High7.873%-
CVE-2026-32074High7.873%-
CVE-2026-32076High7.873%-
CVE-2026-32077High7.873%-
CVE-2026-32078High7.873%-
CVE-2026-32089High7.873%-
CVE-2026-32090High7.873%-
CVE-2026-32152High7.873%-
CVE-2026-32153High7.873%-
CVE-2026-32154High7.873%-
CVE-2026-32155High7.873%-
CVE-2026-32158High7.873%-
CVE-2026-32159High7.873%-
CVE-2026-32160High7.873%-
CVE-2026-32163High7.873%-
CVE-2026-32164High7.873%-
CVE-2026-32165High7.873%-
CVE-2026-32183High7.873%-
CVE-2026-33098High7.873%-
CVE-2026-26183High7.873%-
CVE-2026-33101High7.873%-
CVE-2026-32222High7.873%-
CVE-2026-27913High7.773%-
CVE-2026-32071High7.573%-
CVE-2026-33096High7.573%-
CVE-2026-26154High7.573%-
CVE-2026-32156High7.473%-
CVE-2026-32149High7.373%-
CVE-2026-26151High7.173%-
CVE-2025-64720High7.173%-
CVE-2025-65018High7.173%-
CVE-2026-25184High7.073%-
CVE-2026-26152High7.073%-
CVE-2026-26165High7.073%-
CVE-2026-26166High7.073%-
CVE-2026-26173High7.073%-
CVE-2026-26174High7.073%-
CVE-2026-26177High7.073%-
CVE-2026-26182High7.073%-
CVE-2026-27908High7.073%-
CVE-2026-27917High7.073%-
CVE-2026-27921High7.073%-
CVE-2026-27922High7.073%-
CVE-2026-27926High7.073%-
CVE-2026-27929High7.073%-
CVE-2026-32068High7.073%-
CVE-2026-32070High7.073%-
CVE-2026-32073High7.073%-
CVE-2026-32075High7.073%-
CVE-2026-32082High7.073%-
CVE-2026-32083High7.073%-
CVE-2026-32086High7.073%-
CVE-2026-32087High7.073%-
CVE-2026-32093High7.073%-
CVE-2026-32150High7.073%-
CVE-2026-33099High7.073%-
CVE-2026-33100High7.073%-
CVE-2026-33104High7.073%-
CVE-2026-32080High7.073%-
CVE-2026-32195High7.073%-
CVE-2026-32219High7.073%-
CVE-2026-32224High7.073%-
CVE-2026-32223Medium6.873%-
CVE-2026-26155Medium6.573%-
CVE-2026-27925Medium6.573%-
CVE-2026-32151Medium6.573%-
CVE-2026-32072Medium6.273%-
CVE-2026-26169Medium6.173%-
CVE-2026-32088Medium6.173%-
CVE-2026-25250Medium6.073%-
CVE-2026-23670Medium5.773%-
CVE-2026-23669High8.84.7%-
CVE-2026-24283High8.84.7%-
CVE-2026-25177High8.84.7%-
CVE-2026-25180High8.84.7%-
CVE-2026-25185High8.84.7%-
CVE-2026-25186High8.84.7%-
CVE-2026-25188High8.84.7%-
CVE-2026-62721High7.86.2%-
CVE-2026-25172High8.04.7%-
CVE-2026-25173High8.04.7%-
CVE-2026-26111High8.04.7%-
CVE-2026-23672High7.84.7%-
CVE-2026-23673High7.84.7%-
CVE-2026-24287High7.84.7%-
CVE-2026-24290High7.84.7%-
CVE-2026-24291High7.84.7%-
CVE-2026-24292High7.84.7%-
CVE-2026-24294High7.84.7%-
CVE-2026-25165High7.84.7%-
CVE-2026-25174High7.84.7%-
CVE-2026-25176High7.84.7%-
CVE-2026-25187High7.84.7%-
CVE-2026-25190High7.84.7%-
CVE-2026-26128High7.84.7%-
CVE-2026-26132High7.84.7%-
CVE-2026-24293High7.84.7%-
CVE-2026-24289High7.84.7%-
CVE-2026-25181High7.54.7%-
CVE-2026-23674High7.54.7%-
CVE-2026-25167High7.44.7%-
CVE-2026-85921High8.20.4%-
CVE-2026-23671High7.04.7%-
CVE-2026-24285High7.04.7%-
CVE-2026-24295High7.04.7%-
CVE-2026-24296High7.04.7%-
CVE-2026-25170High7.04.7%-
CVE-2026-25171High7.04.7%-
CVE-2026-25178High7.04.7%-
CVE-2026-25179High7.04.7%-
CVE-2026-25168Medium6.24.7%-
CVE-2026-25169Medium6.24.7%-

Updates (KBs) for Windows 11 version 26H1

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50820522026-04-14Critical9.873%115KEV
KB50820602026-04-14Critical9.873%121KEV
KB50837682026-04-14Critical9.873%119KEV
KB50787362026-03-10High8.84.7%39-
KB50787402026-03-10High8.84.7%39-
KB50821262026-04-14High8.83.5%61-
KB50821272026-04-14High8.83.5%58-
KB51291942026-09-08High8.20.4%2-
KB50845972026-03-10High8.00.9%3-
KB50828062026-04-14High7.80.3%1-
KB50787382026-03-10High7.51.2%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5120708 download and what it fixes KB5126052: the full CVE list KB5120238 install notes and severity KB5099540 download and what it fixes KB5099538 install notes and severity KB5122876: patch details KB5120994: patch details KB5120242 download and what it fixes KB5122882: the full CVE list KB5124008 install notes and severity
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.