{"schema_version":1,"title":"Microsoft Windows 11 26h2 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 196 vulnerabilities in Microsoft Windows 11 26h2: 196 in the last 7 days and 196 in the last 90 days, 11 of them critical and 1 exploited in the wild. The most recent, CVE-2026-97844, was published on 13 October 2026. 196 vulnerabilities in the last four weeks, up from none in the four before. 11 critical against 0, 1 exploited in the wild against 0.","url":"https://junglewise.ai/threats/technologies/windows-11-26h2","json_url":"https://junglewise.ai/threats/technologies/windows-11-26h2.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/windows-11-26h2","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":130,"all_time":196,"critical":11,"exploited":1,"last_7_days":196,"last_30_days":196,"last_90_days":196,"last_365_days":196},"latest":[{"cve":"CVE-2026-97844","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97844-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Windows DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:25.003+00:00","url":"https://junglewise.ai/threats/cve-2026-97844-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97843","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97843-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Windows DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:24.827+00:00","url":"https://junglewise.ai/threats/cve-2026-97843-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97842","cvss":6.5,"epss":0.0055,"slug":"cve-2026-97842-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Windows DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:24.647+00:00","url":"https://junglewise.ai/threats/cve-2026-97842-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97841","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97841-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Windows DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:24.463+00:00","url":"https://junglewise.ai/threats/cve-2026-97841-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97840","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97840-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:24.29+00:00","url":"https://junglewise.ai/threats/cve-2026-97840-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97839","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97839-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:24.113+00:00","url":"https://junglewise.ai/threats/cve-2026-97839-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97838","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97838-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.933+00:00","url":"https://junglewise.ai/threats/cve-2026-97838-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97837","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97837-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.75+00:00","url":"https://junglewise.ai/threats/cve-2026-97837-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97836","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97836-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.573+00:00","url":"https://junglewise.ai/threats/cve-2026-97836-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97835","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97835-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.4+00:00","url":"https://junglewise.ai/threats/cve-2026-97835-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97834","cvss":6.5,"epss":0.0055,"slug":"cve-2026-97834-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.22+00:00","url":"https://junglewise.ai/threats/cve-2026-97834-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97833","cvss":6.5,"epss":0.0055,"slug":"cve-2026-97833-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.04+00:00","url":"https://junglewise.ai/threats/cve-2026-97833-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97832","cvss":6.5,"epss":0.0055,"slug":"cve-2026-97832-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:22.863+00:00","url":"https://junglewise.ai/threats/cve-2026-97832-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97831","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97831-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Windows DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:22.687+00:00","url":"https://junglewise.ai/threats/cve-2026-97831-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97829","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97829-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Windows DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:22.373+00:00","url":"https://junglewise.ai/threats/cve-2026-97829-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97828","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97828-buffer-over-read-in-dns-server-allows-an-authorized-attacker-to","title":"DNS Server buffer over-read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:22.18+00:00","url":"https://junglewise.ai/threats/cve-2026-97828-buffer-over-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97827","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97827-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:21.993+00:00","url":"https://junglewise.ai/threats/cve-2026-97827-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97826","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97826-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:21.807+00:00","url":"https://junglewise.ai/threats/cve-2026-97826-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97825","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97825-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:21.65+00:00","url":"https://junglewise.ai/threats/cve-2026-97825-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97824","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97824-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:21.463+00:00","url":"https://junglewise.ai/threats/cve-2026-97824-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97823","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97823-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:21.193+00:00","url":"https://junglewise.ai/threats/cve-2026-97823-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97822","cvss":6.5,"epss":0.0074,"slug":"cve-2026-97822-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:20.98+00:00","url":"https://junglewise.ai/threats/cve-2026-97822-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97821","cvss":6.5,"epss":0.0074,"slug":"cve-2026-97821-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:20.803+00:00","url":"https://junglewise.ai/threats/cve-2026-97821-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97820","cvss":6.5,"epss":0.0074,"slug":"cve-2026-97820-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:20.62+00:00","url":"https://junglewise.ai/threats/cve-2026-97820-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97819","cvss":6.5,"epss":0.0095,"slug":"cve-2026-97819-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Windows DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:20.443+00:00","url":"https://junglewise.ai/threats/cve-2026-97819-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"}],"weekly":[{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":11,"exploited":1,"vulnerabilities":196},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Microsoft Windows","slug":"windows-","vulnerabilities":1706,"url":"https://junglewise.ai/threats/technologies/windows-"},{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":588,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":493,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":486,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":473,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":469,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":461,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":455,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":427,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":427,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"},{"name":"Microsoft Windows 10 21h2","slug":"windows-10-21h2","vulnerabilities":359,"url":"https://junglewise.ai/threats/technologies/windows-10-21h2"},{"name":"Microsoft Windows 10 22h2","slug":"windows-10-22h2","vulnerabilities":358,"url":"https://junglewise.ai/threats/technologies/windows-10-22h2"}],"technology":{"hub":true,"name":"Microsoft Windows 11 26h2","slug":"windows-11-26h2","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":[],"homepage":"https://www.microsoft.com/windows","description":"Latest version of the Windows operating system for personal computers.","url":"https://junglewise.ai/threats/technologies/windows-11-26h2"},"most_severe":[{"cve":"CVE-2026-96951","cvss":8.8,"epss":0.0151,"slug":"cve-2026-96951-microsoft-windows-command-injection-vulnerability","title":"Microsoft Windows command injection in Shell","severity":"critical","exploited":true,"published_at":"2026-10-13T19:22:07.76+00:00","url":"https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability"},{"cve":"CVE-2026-97814","cvss":9.8,"epss":0.0099,"slug":"cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an","title":"Windows Text Shaping heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.753+00:00","url":"https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an"},{"cve":"CVE-2026-97805","cvss":9.8,"epss":0.0096,"slug":"cve-2026-97805-out-of-bounds-read-in-windows-partition-management-driver-allows","title":"Windows Partition Management Driver out-of-bounds read","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:18.44+00:00","url":"https://junglewise.ai/threats/cve-2026-97805-out-of-bounds-read-in-windows-partition-management-driver-allows"},{"cve":"CVE-2026-97816","cvss":9.8,"epss":0.0091,"slug":"cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized","title":"OpenSSH for Windows use-after-free remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:20.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized"},{"cve":"CVE-2026-96909","cvss":9.8,"epss":0.0089,"slug":"cve-2026-96909-heap-based-buffer-overflow-in-windows-bitlocker-allows-an","title":"Windows BitLocker heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:01.52+00:00","url":"https://junglewise.ai/threats/cve-2026-96909-heap-based-buffer-overflow-in-windows-bitlocker-allows-an"},{"cve":"CVE-2026-96219","cvss":9.8,"epss":0.0089,"slug":"cve-2026-96219-out-of-bounds-write-in-windows-local-security-authority-subsystem","title":"Windows Local Security Authority Subsystem Service out-of-bounds write","severity":"critical","exploited":false,"published_at":"2026-10-13T19:21:47.737+00:00","url":"https://junglewise.ai/threats/cve-2026-96219-out-of-bounds-write-in-windows-local-security-authority-subsystem"},{"cve":"CVE-2026-85792","cvss":9.8,"epss":0.0089,"slug":"cve-2026-85792-remote-code-execution-in-windows-routing-and-remote-access","title":"Microsoft Windows Routing and Remote Access Service remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:21:02.57+00:00","url":"https://junglewise.ai/threats/cve-2026-85792-remote-code-execution-in-windows-routing-and-remote-access"},{"cve":"CVE-2026-97815","cvss":9.8,"epss":0.0069,"slug":"cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an","title":"Microsoft Windows Error Reporting heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:22:19.93+00:00","url":"https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an"},{"cve":"CVE-2026-96096","cvss":9.8,"epss":0.0067,"slug":"cve-2026-96096-heap-based-buffer-overflow-in-windows-media-player-allows-an","title":"Windows Media Player heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:21:45.403+00:00","url":"https://junglewise.ai/threats/cve-2026-96096-heap-based-buffer-overflow-in-windows-media-player-allows-an"},{"cve":"CVE-2026-83869","cvss":9.8,"epss":0.0065,"slug":"cve-2026-83869-integer-underflow-wrap-or-wraparound-in-dns-server-allows-an","title":"DNS Server integer underflow remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T19:20:36.677+00:00","url":"https://junglewise.ai/threats/cve-2026-83869-integer-underflow-wrap-or-wraparound-in-dns-server-allows-an"}],"generated_at":"2026-10-19T13:07:00.256762+00:00"}