Patch tracker / Products / Windows 11 Version 26H2

Windows 11 Version 26H2: vulnerabilities and security updates

Every CVE affecting Windows 11 Version 26H2 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
1009
Updates (KBs)
1
Actively exploited (KEV)
1
Critical Severity
42

CVEs affecting Windows 11 Version 26H2

CVESeverityCVSSEPSSStatus
CVE-2026-96951High8.89.8%KEV
CVE-2026-100202Critical9.89.8%-
CVE-2026-100219Critical9.89.8%-
CVE-2026-100222Critical9.89.8%-
CVE-2026-102210Critical9.89.8%-
CVE-2026-105010Critical9.89.8%-
CVE-2026-105016Critical9.89.8%-
CVE-2026-69634Critical9.89.8%-
CVE-2026-69639Critical9.89.8%-
CVE-2026-69705Critical9.89.8%-
CVE-2026-69883Critical9.89.8%-
CVE-2026-69886Critical9.89.8%-
CVE-2026-70024Critical9.89.8%-
CVE-2026-70096Critical9.89.8%-
CVE-2026-70147Critical9.89.8%-
CVE-2026-70153Critical9.89.8%-
CVE-2026-70157Critical9.89.8%-
CVE-2026-83517Critical9.89.8%-
CVE-2026-83519Critical9.89.8%-
CVE-2026-83578Critical9.89.8%-
CVE-2026-83693Critical9.89.8%-
CVE-2026-83748Critical9.89.8%-
CVE-2026-83770Critical9.89.8%-
CVE-2026-83782Critical9.89.8%-
CVE-2026-83869Critical9.89.8%-
CVE-2026-83910Critical9.89.8%-
CVE-2026-83935Critical9.89.8%-
CVE-2026-84015Critical9.89.8%-
CVE-2026-85792Critical9.89.8%-
CVE-2026-85806Critical9.89.8%-
CVE-2026-85809Critical9.89.8%-
CVE-2026-85814Critical9.89.8%-
CVE-2026-85928Critical9.89.8%-
CVE-2026-96096Critical9.89.8%-
CVE-2026-96219Critical9.89.8%-
CVE-2026-96909Critical9.89.8%-
CVE-2026-96924Critical9.89.8%-
CVE-2026-97805Critical9.89.8%-
CVE-2026-97814Critical9.89.8%-
CVE-2026-97815Critical9.89.8%-
CVE-2026-97816Critical9.89.8%-
CVE-2026-105008Critical9.09.8%-
CVE-2026-85818Critical9.09.8%-
CVE-2026-100220High8.89.8%-
CVE-2026-102203High8.89.8%-
CVE-2026-102214High8.89.8%-
CVE-2026-102217High8.89.8%-
CVE-2026-102225High8.89.8%-
CVE-2026-103575High8.89.8%-
CVE-2026-105007High8.89.8%-
CVE-2026-105733High8.89.8%-
CVE-2026-108458High8.89.8%-
CVE-2026-108463High8.89.8%-
CVE-2026-108467High8.89.8%-
CVE-2026-69326High8.89.8%-
CVE-2026-69918High8.89.8%-
CVE-2026-69945High8.89.8%-
CVE-2026-69985High8.89.8%-
CVE-2026-70068High8.89.8%-
CVE-2026-70089High8.89.8%-
CVE-2026-70149High8.89.8%-
CVE-2026-70158High8.89.8%-
CVE-2026-70185High8.89.8%-
CVE-2026-70210High8.89.8%-
CVE-2026-70258High8.89.8%-
CVE-2026-70262High8.89.8%-
CVE-2026-70275High8.89.8%-
CVE-2026-70580High8.89.8%-
CVE-2026-77496High8.89.8%-
CVE-2026-83523High8.89.8%-
CVE-2026-83642High8.89.8%-
CVE-2026-83643High8.89.8%-
CVE-2026-83688High8.89.8%-
CVE-2026-83716High8.89.8%-
CVE-2026-83725High8.89.8%-
CVE-2026-83728High8.89.8%-
CVE-2026-83759High8.89.8%-
CVE-2026-83771High8.89.8%-
CVE-2026-83777High8.89.8%-
CVE-2026-83778High8.89.8%-
CVE-2026-83784High8.89.8%-
CVE-2026-83789High8.89.8%-
CVE-2026-83797High8.89.8%-
CVE-2026-83851High8.89.8%-
CVE-2026-83874High8.89.8%-
CVE-2026-83889High8.89.8%-
CVE-2026-83923High8.89.8%-
CVE-2026-83928High8.89.8%-
CVE-2026-83929High8.89.8%-
CVE-2026-83934High8.89.8%-
CVE-2026-85339High8.89.8%-
CVE-2026-85817High8.89.8%-
CVE-2026-85903High8.89.8%-
CVE-2026-85905High8.89.8%-
CVE-2026-85931High8.89.8%-
CVE-2026-85936High8.89.8%-
CVE-2026-88073High8.89.8%-
CVE-2026-88112High8.89.8%-
CVE-2026-88114High8.89.8%-
CVE-2026-88116High8.89.8%-
CVE-2026-88136High8.89.8%-
CVE-2026-88142High8.89.8%-
CVE-2026-88157High8.89.8%-
CVE-2026-88159High8.89.8%-
CVE-2026-88165High8.89.8%-
CVE-2026-88219High8.89.8%-
CVE-2026-96913High8.89.8%-
CVE-2026-96914High8.89.8%-
CVE-2026-96917High8.89.8%-
CVE-2026-96952High8.89.8%-
CVE-2026-83845High8.49.8%-
CVE-2026-85369High8.29.8%-
CVE-2026-100218High8.19.8%-
CVE-2026-108460High8.19.8%-
CVE-2026-69913High8.19.8%-
CVE-2026-70013High8.19.8%-
CVE-2026-70038High8.19.8%-
CVE-2026-70062High8.19.8%-
CVE-2026-70111High8.19.8%-
CVE-2026-70229High8.19.8%-
CVE-2026-83522High8.19.8%-
CVE-2026-83914High8.19.8%-
CVE-2026-85371High8.19.8%-
CVE-2026-85799High8.19.8%-
CVE-2026-85926High8.19.8%-
CVE-2026-83838High8.09.8%-
CVE-2026-88121High8.09.8%-
CVE-2026-96844High8.09.8%-
CVE-2026-100215High7.89.8%-
CVE-2026-100217High7.89.8%-
CVE-2026-102196High7.89.8%-
CVE-2026-102201High7.89.8%-
CVE-2026-102202High7.89.8%-
CVE-2026-102205High7.89.8%-
CVE-2026-102215High7.89.8%-
CVE-2026-102216High7.89.8%-
CVE-2026-102218High7.89.8%-
CVE-2026-102220High7.89.8%-
CVE-2026-102227High7.89.8%-
CVE-2026-103553High7.89.8%-
CVE-2026-103568High7.89.8%-
CVE-2026-105003High7.89.8%-
CVE-2026-105004High7.89.8%-
CVE-2026-108130High7.89.8%-
CVE-2026-108136High7.89.8%-
CVE-2026-49785High7.89.8%-
CVE-2026-61931High7.89.8%-
CVE-2026-68836High7.89.8%-
CVE-2026-69471High7.89.8%-
CVE-2026-69633High7.89.8%-
CVE-2026-69650High7.89.8%-
CVE-2026-69673High7.89.8%-
CVE-2026-69718High7.89.8%-
CVE-2026-69733High7.89.8%-
CVE-2026-69783High7.89.8%-
CVE-2026-69798High7.89.8%-
CVE-2026-69850High7.89.8%-
CVE-2026-69867High7.89.8%-
CVE-2026-69880High7.89.8%-
CVE-2026-69882High7.89.8%-
CVE-2026-69884High7.89.8%-
CVE-2026-69898High7.89.8%-
CVE-2026-69909High7.89.8%-
CVE-2026-69916High7.89.8%-
CVE-2026-69923High7.89.8%-
CVE-2026-69926High7.89.8%-
CVE-2026-69934High7.89.8%-
CVE-2026-69942High7.89.8%-
CVE-2026-69949High7.89.8%-
CVE-2026-69950High7.89.8%-
CVE-2026-69952High7.89.8%-
CVE-2026-69953High7.89.8%-
CVE-2026-69957High7.89.8%-
CVE-2026-69959High7.89.8%-
CVE-2026-69963High7.89.8%-
CVE-2026-69966High7.89.8%-
CVE-2026-70008High7.89.8%-
CVE-2026-70010High7.89.8%-
CVE-2026-70015High7.89.8%-
CVE-2026-70023High7.89.8%-
CVE-2026-70027High7.89.8%-
CVE-2026-70048High7.89.8%-
CVE-2026-70051High7.89.8%-
CVE-2026-70052High7.89.8%-
CVE-2026-70054High7.89.8%-
CVE-2026-70059High7.89.8%-
CVE-2026-70060High7.89.8%-
CVE-2026-70064High7.89.8%-
CVE-2026-70092High7.89.8%-
CVE-2026-70093High7.89.8%-
CVE-2026-70102High7.89.8%-
CVE-2026-70103High7.89.8%-
CVE-2026-70104High7.89.8%-
CVE-2026-70106High7.89.8%-
CVE-2026-70108High7.89.8%-
CVE-2026-70109High7.89.8%-
CVE-2026-70110High7.89.8%-
CVE-2026-70112High7.89.8%-
CVE-2026-70113High7.89.8%-
CVE-2026-70114High7.89.8%-
CVE-2026-70117High7.89.8%-
CVE-2026-70121High7.89.8%-
CVE-2026-70123High7.89.8%-
CVE-2026-70131High7.89.8%-
CVE-2026-70132High7.89.8%-
CVE-2026-70138High7.89.8%-
CVE-2026-70139High7.89.8%-
CVE-2026-70142High7.89.8%-
CVE-2026-70143High7.89.8%-
CVE-2026-70151High7.89.8%-
CVE-2026-70172High7.89.8%-
CVE-2026-70177High7.89.8%-
CVE-2026-70184High7.89.8%-
CVE-2026-70218High7.89.8%-
CVE-2026-70222High7.89.8%-
CVE-2026-70225High7.89.8%-
CVE-2026-70228High7.89.8%-
CVE-2026-70233High7.89.8%-
CVE-2026-70238High7.89.8%-
CVE-2026-70245High7.89.8%-
CVE-2026-70247High7.89.8%-
CVE-2026-70255High7.89.8%-
CVE-2026-70274High7.89.8%-
CVE-2026-70278High7.89.8%-
CVE-2026-70285High7.89.8%-
CVE-2026-70286High7.89.8%-
CVE-2026-70303High7.89.8%-
CVE-2026-70566High7.89.8%-
CVE-2026-73027High7.89.8%-
CVE-2026-78459High7.89.8%-
CVE-2026-83506High7.89.8%-
CVE-2026-83508High7.89.8%-
CVE-2026-83513High7.89.8%-
CVE-2026-83514High7.89.8%-
CVE-2026-83567High7.89.8%-
CVE-2026-83568High7.89.8%-
CVE-2026-83569High7.89.8%-
CVE-2026-83570High7.89.8%-
CVE-2026-83579High7.89.8%-
CVE-2026-83583High7.89.8%-
CVE-2026-83585High7.89.8%-
CVE-2026-83586High7.89.8%-
CVE-2026-83587High7.89.8%-
CVE-2026-83588High7.89.8%-
CVE-2026-83634High7.89.8%-
CVE-2026-83638High7.89.8%-
CVE-2026-83639High7.89.8%-
CVE-2026-83640High7.89.8%-
CVE-2026-83641High7.89.8%-
CVE-2026-83650High7.89.8%-

Showing the 250 highest-risk of 1009 CVEs. See all in the CVE reference.

Updates (KBs) for Windows 11 Version 26H2

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB51276482026-10-13Critical9.89.8%1009KEV

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5122876 install notes and severity KB5126052: the full CVE list KB5129238: the full CVE list KB5126651 download and what it fixes KB5122882: the full CVE list KB5129235: the full CVE list KB5126655: patch details KB5126657 install notes and severity KB5123099 install notes and severity KB5122871 install notes and severity
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.