windows_11_version_26h2 vulnerabilities
CVEs whose affected-version data names the windows_11_version_26h2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
726 CVEsRSS
CVE-2026-100216High· 7.0Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-100215High· 7.8Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
CVE-2026-100203High· 7.0Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
CVE-2026-100202Critical· 9.8Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
CVE-2026-100201High· 7.0Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.
CVE-2026-100200High· 7.0Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.