windows_11_26h2 vulnerabilities
CVEs whose affected-version data names the windows_11_26h2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
277 CVEsRSS
CVE-2026-69905Medium· 5.5Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.
CVE-2026-69902Medium· 6.7Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-69898High· 7.8Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-69886Critical· 9.8Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-108129Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-108128Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
CVE-2026-108127Medium· 6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.