# Microsoft Windows 11 26h1


- [CVE-2026-33824](https://insights.sbomify.com/CVE-2026-33824/): Microsoft Internet Key Exchange (IKE) Service Extensions Double Free (critical 9.8, exploited in the wild)
- [CVE-2026-96951](https://insights.sbomify.com/CVE-2026-96951/): Microsoft Windows Command Injection (high 8.8, exploited in the wild)
- [CVE-2026-81963](https://insights.sbomify.com/CVE-2026-81963/): Microsoft Windows Link Following (high 7.8, exploited in the wild)
- [CVE-2026-68820](https://insights.sbomify.com/CVE-2026-68820/): Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free (high 7.0, exploited in the wild)
- [CVE-2026-32202](https://insights.sbomify.com/CVE-2026-32202/): Microsoft Windows Protection Mechanism Failure (medium 4.3, exploited in the wild)
- [CVE-2026-57092](https://insights.sbomify.com/CVE-2026-57092/): Microsoft Windows VMSwitch Elevation of Privilege Vulnerability (critical 9.9)
- [CVE-2026-100202](https://insights.sbomify.com/CVE-2026-100202/): Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-100219](https://insights.sbomify.com/CVE-2026-100219/): Microsoft QUIC Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-100222](https://insights.sbomify.com/CVE-2026-100222/): Network Policy Server (NPS) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-102210](https://insights.sbomify.com/CVE-2026-102210/): Windows Text Shaping Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-105010](https://insights.sbomify.com/CVE-2026-105010/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (critical 9.8)
- [CVE-2026-69634](https://insights.sbomify.com/CVE-2026-69634/): Windows iSCSI Remote Code Execution Vulnerability (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/windows-11-26h1/