# Microsoft Windows 11 26h2


- [CVE-2026-96951](https://insights.sbomify.com/CVE-2026-96951/): Microsoft Windows Command Injection (high 8.8, exploited in the wild)
- [CVE-2026-100202](https://insights.sbomify.com/CVE-2026-100202/): Windows Message Queuing Queue Manager Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-100219](https://insights.sbomify.com/CVE-2026-100219/): Microsoft QUIC Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-100222](https://insights.sbomify.com/CVE-2026-100222/): Network Policy Server (NPS) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-102210](https://insights.sbomify.com/CVE-2026-102210/): Windows Text Shaping Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-105010](https://insights.sbomify.com/CVE-2026-105010/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (critical 9.8)
- [CVE-2026-69634](https://insights.sbomify.com/CVE-2026-69634/): Windows iSCSI Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69639](https://insights.sbomify.com/CVE-2026-69639/): Windows libarchive Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69883](https://insights.sbomify.com/CVE-2026-69883/): Windows iSCSI Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69886](https://insights.sbomify.com/CVE-2026-69886/): Windows Imaging Component Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-70024](https://insights.sbomify.com/CVE-2026-70024/): Windows Internet Information Services Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-70147](https://insights.sbomify.com/CVE-2026-70147/): Microsoft PostScript Printer Driver Remote Code Execution Vulnerability (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/windows-11-26h2/