# Microsoft Windows 11 version 26H1.

Every CVE that names Microsoft Windows 11 version 26H1 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72996.md)
  `CVE-2026-72996` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-20
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72994.md)
  `CVE-2026-72994` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-20
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72993.md)
  `CVE-2026-72993` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72992.md)
  `CVE-2026-72992` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72991.md)
  `CVE-2026-72991` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72990.md)
  `CVE-2026-72990` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72988.md)
  `CVE-2026-72988` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72995.md)
  `CVE-2026-72995` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Volume Shadow Copy Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72985.md)
  `CVE-2026-72985` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70570.md)
  `CVE-2026-70570` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Imaging Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70296.md)
  `CVE-2026-70296` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Media Player Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70203.md)
  `CVE-2026-70203` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Secure Kernel Mode Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69906.md)
  `CVE-2026-69906` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69441.md)
  `CVE-2026-69441` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Race condition, Memory corruption
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69601.md)
  `CVE-2026-69601` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69590.md)
  `CVE-2026-69590` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69575.md)
  `CVE-2026-69575` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Storage Spaces Controller Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69568.md)
  `CVE-2026-69568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69593.md)
  `CVE-2026-69593` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Work Folder Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69560.md)
  `CVE-2026-69560` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Imaging Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69499.md)
  `CVE-2026-69499` · CVE record: Microsoft Microsoft Office 365 for Mac and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69490.md)
  `CVE-2026-69490` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69489.md)
  `CVE-2026-69489` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows VOLSNAP.SYS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69426.md)
  `CVE-2026-69426` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft OpenSSH for Windows Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69397.md)
  `CVE-2026-69397` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69392.md)
  `CVE-2026-69392` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69910.md)
  `CVE-2026-69910` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69352.md)
  `CVE-2026-69352` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-20
- [Windows Audio Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69311.md)
  `CVE-2026-69311` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69298.md)
  `CVE-2026-69298` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69323.md)
  `CVE-2026-69323` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69334.md)
  `CVE-2026-69334` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69291.md)
  `CVE-2026-69291` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69290.md)
  `CVE-2026-69290` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Print Spooler Components Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69309.md)
  `CVE-2026-69309` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69287.md)
  `CVE-2026-69287` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-68896.md)
  `CVE-2026-68896` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal
- [Windows Network Connection Broker Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72967.md)
  `CVE-2026-72967` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-72966.md)
  `CVE-2026-72966` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Windows Internet Connection Sharing (ICS) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-72964.md)
  `CVE-2026-72964` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72961.md)
  `CVE-2026-72961` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Media Player Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72960.md)
  `CVE-2026-72960` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72959.md)
  `CVE-2026-72959` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72950.md)
  `CVE-2026-72950` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Spaceport.sys Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-72942.md)
  `CVE-2026-72942` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72941.md)
  `CVE-2026-72941` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows USB Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72953.md)
  `CVE-2026-72953` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Spaceport.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72952.md)
  `CVE-2026-72952` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Message Queuing Queue Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-72932.md)
  `CVE-2026-72932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72933.md)
  `CVE-2026-72933` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows SMB Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72936.md)
  `CVE-2026-72936` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-72931.md)
  `CVE-2026-72931` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [Winsock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72927.md)
  `CVE-2026-72927` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-71352.md)
  `CVE-2026-71352` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-71342.md)
  `CVE-2026-71342` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Spaceport.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-71349.md)
  `CVE-2026-71349` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70583.md)
  `CVE-2026-70583` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Mobile Broadband Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70579.md)
  `CVE-2026-70579` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Credential Guard Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70578.md)
  `CVE-2026-70578` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70577.md)
  `CVE-2026-70577` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-26h1.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-26h1.md?cursor=WyIyMDI2LTA5LTA4VDE3OjE2OjU4Ljk1MzAwMFoiLCJDVkUtMjAyNi03MDU3NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-11-version-26h1&cursor=WyIyMDI2LTA5LTA4VDE3OjE3OjU0LjAzMzAwMFoiLCJDVkUtMjAyNi03Mjk5NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-26h1/?cursor=WyIyMDI2LTA5LTA4VDE3OjE3OjU0LjAzMzAwMFoiLCJDVkUtMjAyNi03Mjk5NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.