Patch tracker / Products / Windows 11 version 26H1
Windows 11 version 26H1: vulnerabilities and security updates
Every CVE affecting Windows 11 version 26H1 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.
CVEs
1570
Updates (KBs)
9
Actively exploited (KEV)
9
Critical Severity
353
CVEs affecting Windows 11 version 26H1
| CVE | Severity | CVSS | EPSS | Status |
|---|---|---|---|---|
| CVE-2026-21513 | High | 8.8 | 24% | KEV |
| CVE-2026-21510 | High | 8.8 | 24% | KEV |
| CVE-2026-21519 | High | 7.8 | 24% | KEV |
| CVE-2026-21533 | High | 7.8 | 24% | KEV |
| CVE-2026-21525 | Medium | 6.2 | 24% | KEV |
| CVE-2026-33824 | Critical | 9.8 | 2.0% | KEV |
| CVE-2026-81963 | High | 7.8 | 2.8% | KEV |
| CVE-2026-68820 | High | 7.0 | 1.2% | KEV |
| CVE-2026-32202 | Medium | 4.3 | 4.9% | KEV |
| CVE-2024-49123 | High | 8.1 | 84% | - |
| CVE-2024-49132 | High | 8.1 | 84% | - |
| CVE-2024-49075 | High | 7.5 | 84% | - |
| CVE-2025-21330 | High | 7.5 | 81% | - |
| CVE-2025-2884 | Critical | 9.9 | 24% | - |
| CVE-2026-21255 | High | 8.8 | 24% | - |
| CVE-2026-21249 | High | 8.8 | 24% | - |
| CVE-2026-21236 | High | 7.8 | 24% | - |
| CVE-2026-21250 | High | 7.8 | 24% | - |
| CVE-2026-21245 | High | 7.8 | 24% | - |
| CVE-2026-21240 | High | 7.8 | 24% | - |
| CVE-2026-21238 | High | 7.8 | 24% | - |
| CVE-2026-21232 | High | 7.8 | 24% | - |
| CVE-2026-21231 | High | 7.8 | 24% | - |
| CVE-2026-20846 | High | 7.5 | 24% | - |
| CVE-2026-21248 | High | 7.3 | 24% | - |
| CVE-2026-21247 | High | 7.3 | 24% | - |
| CVE-2026-21235 | High | 7.3 | 24% | - |
| CVE-2026-21244 | High | 7.3 | 24% | - |
| CVE-2026-21242 | High | 7.0 | 24% | - |
| CVE-2026-21234 | High | 7.0 | 24% | - |
| CVE-2026-21508 | High | 7.0 | 24% | - |
| CVE-2026-21253 | High | 7.0 | 24% | - |
| CVE-2026-21241 | High | 7.0 | 24% | - |
| CVE-2026-21237 | High | 7.0 | 24% | - |
| CVE-2026-34348 | Critical | 9.9 | 4.9% | - |
| CVE-2026-33842 | Critical | 9.9 | 4.9% | - |
| CVE-2026-34328 | Critical | 9.9 | 4.9% | - |
| CVE-2026-34346 | Critical | 9.9 | 4.9% | - |
| CVE-2026-34349 | Critical | 9.9 | 4.9% | - |
| CVE-2026-40422 | Critical | 9.9 | 4.9% | - |
| CVE-2026-41087 | Critical | 9.9 | 4.9% | - |
| CVE-2026-44806 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49167 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49174 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49177 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49180 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49794 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49799 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49801 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49807 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50294 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50295 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50300 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50302 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50303 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50310 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50312 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50316 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50334 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50339 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50341 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50350 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50352 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50366 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50374 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50375 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50376 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50377 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50381 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50383 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50389 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50394 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50401 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50409 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50415 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50416 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50418 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50419 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50420 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50430 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50431 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50432 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50434 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50437 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50442 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50445 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50453 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50455 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50456 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50473 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50475 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50483 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50485 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50495 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50497 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50504 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50661 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50681 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50690 | Critical | 9.9 | 4.9% | - |
| CVE-2026-54126 | Critical | 9.9 | 4.9% | - |
| CVE-2026-54997 | Critical | 9.9 | 4.9% | - |
| CVE-2026-55000 | Critical | 9.9 | 4.9% | - |
| CVE-2026-55003 | Critical | 9.9 | 4.9% | - |
| CVE-2026-56168 | Critical | 9.9 | 4.9% | - |
| CVE-2026-56184 | Critical | 9.9 | 4.9% | - |
| CVE-2026-56649 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57083 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57084 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57085 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57092 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57095 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57097 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57976 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57979 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57982 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58533 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58535 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58539 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58543 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58545 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58546 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58547 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58614 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58638 | Critical | 9.9 | 4.9% | - |
| CVE-2026-42990 | Critical | 9.8 | 4.9% | - |
| CVE-2026-49172 | Critical | 9.8 | 4.9% | - |
| CVE-2026-50447 | Critical | 9.8 | 4.9% | - |
| CVE-2026-54990 | Critical | 9.8 | 4.9% | - |
| CVE-2026-56188 | Critical | 9.8 | 4.9% | - |
| CVE-2026-56190 | Critical | 9.8 | 4.9% | - |
| CVE-2025-54518 | Critical | 9.8 | 4.7% | - |
| CVE-2026-50380 | Critical | 9.6 | 4.9% | - |
| CVE-2026-62762 | Critical | 9.8 | 3.6% | - |
| CVE-2026-62801 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68830 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68831 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68839 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68843 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68849 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68851 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68852 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68874 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68881 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68886 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68891 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68895 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68898 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69267 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69276 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69286 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69288 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69294 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69303 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69308 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69315 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69316 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69317 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69318 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69321 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69343 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69344 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69345 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69349 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69350 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69351 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69353 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69367 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69373 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69374 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69376 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69381 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69390 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69393 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69403 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69406 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69408 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69431 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69449 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69453 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69457 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69463 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69469 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69474 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69483 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69491 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69493 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69496 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69504 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69507 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69525 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69527 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69531 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69548 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69552 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69554 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69568 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69569 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69572 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69579 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69586 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69590 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69591 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69609 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69616 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69618 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69627 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69674 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69684 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69713 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69715 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69723 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69741 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69768 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69769 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69770 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69792 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69794 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69808 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69819 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69824 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69829 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69832 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69853 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69862 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69895 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69910 | Critical | 9.8 | 3.6% | - |
| CVE-2026-70145 | Critical | 9.8 | 3.6% | - |
| CVE-2026-70290 | Critical | 9.8 | 3.6% | - |
| CVE-2026-70296 | Critical | 9.8 | 3.6% | - |
| CVE-2026-70575 | Critical | 9.8 | 3.6% | - |
| CVE-2026-70582 | Critical | 9.8 | 3.6% | - |
| CVE-2026-71339 | Critical | 9.8 | 3.6% | - |
| CVE-2026-71341 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72927 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72931 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72935 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72937 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72939 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72942 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72947 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72964 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72966 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72980 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72982 | Critical | 9.8 | 3.6% | - |
| CVE-2026-72983 | Critical | 9.8 | 3.6% | - |
| CVE-2026-73004 | Critical | 9.8 | 3.6% | - |
| CVE-2026-73008 | Critical | 9.8 | 3.6% | - |
| CVE-2026-73009 | Critical | 9.8 | 3.6% | - |
| CVE-2026-73019 | Critical | 9.8 | 3.6% | - |
| CVE-2026-77491 | Critical | 9.8 | 3.6% | - |
Showing the 250 highest-risk of 1570 CVEs. See all in the CVE reference.
Updates (KBs) for Windows 11 version 26H1
| Update | Released | Severity | CVSS | EPSS | CVEs | Status |
|---|---|---|---|---|---|---|
| KB5077179 | 2026-02-10 | High | 8.8 | 24% | 26 | KEV |
| KB5101649 | 2026-07-14 | Critical | 9.9 | 4.9% | 383 | KEV |
| KB5124012 | 2026-09-08 | Critical | 9.8 | 2.8% | 627 | KEV |
| KB5083768 | 2026-04-14 | Critical | 9.8 | 2.0% | 119 | KEV |
| KB5121000 | 2026-08-11 | Critical | 9.8 | 1.2% | 195 | KEV |
| KB5095051 | 2026-07-14 | Critical | 9.8 | 2.6% | 123 | - |
| KB5089548 | 2026-07-14 | Critical | 9.8 | 2.2% | 62 | - |
| KB5079466 | 2026-03-10 | High | 8.8 | 4.7% | 40 | - |
| KB5129194 | 2026-09-08 | High | 8.2 | 0.4% | 2 | - |
Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.
Most searched on Senserva right now
KB5122876 install notes and severity
KB5126052: the full CVE list
KB5122882: patch details
KB5123099: the full CVE list
KB5120708 download and what it fixes
KB5122871 install notes and severity
KB5129235 install notes and severity
KB5122878: patch details
KB5120238 download and what it fixes
KB5129238 download and what it fixes