# Microsoft Windows 11 26h2 vulnerabilities Source: https://junglewise.ai/threats/technologies/windows-11-26h2 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 19 October 2026, 13:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/windows-11-26h2.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 196 vulnerabilities in Microsoft Windows 11 26h2: 196 in the last 7 days and 196 in the last 90 days, 11 of them critical and 1 exploited in the wild. The most recent, CVE-2026-97844, was published on 13 October 2026. 196 vulnerabilities in the last four weeks, up from none in the four before. 11 critical against 0, 1 exploited in the wild against 0. ## Counts - Last 7 days: 196 - Last 30 days: 196 - Last 90 days: 196 - All time: 196 (11 critical, 1 exploited in the wild) ## About Microsoft Windows 11 26h2 Latest version of the Windows operating system for personal computers. ## Latest Microsoft Windows 11 26h2 vulnerabilities - [CVE-2026-97844: Windows DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97844-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97843: Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97843-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97842: Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97842-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97841: Windows DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97841-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97840: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97840-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97839: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97839-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97838: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97838-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97837: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97837-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97836: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97836-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97835: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97835-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97834: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97834-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97833: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97833-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97832: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97832-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97831: Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97831-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97829: Windows DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97829-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97828: DNS Server buffer over-read information disclosure](https://junglewise.ai/threats/cve-2026-97828-buffer-over-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97827: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97827-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97826: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97826-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97825: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97825-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97824: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97824-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97823: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97823-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97822: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97822-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97821: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97821-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97820: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97820-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97819: Windows DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97819-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) ## Most severe Microsoft Windows 11 26h2 vulnerabilities - [CVE-2026-96951: Microsoft Windows command injection in Shell](https://junglewise.ai/threats/cve-2026-96951-microsoft-windows-command-injection-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-97814: Windows Text Shaping heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-97814-heap-based-buffer-overflow-in-windows-text-shaping-allows-an) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-97805: Windows Partition Management Driver out-of-bounds read](https://junglewise.ai/threats/cve-2026-97805-out-of-bounds-read-in-windows-partition-management-driver-allows) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-97816: OpenSSH for Windows use-after-free remote code execution](https://junglewise.ai/threats/cve-2026-97816-use-after-free-in-openssh-for-windows-allows-an-unauthorized) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-96909: Windows BitLocker heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-96909-heap-based-buffer-overflow-in-windows-bitlocker-allows-an) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-96219: Windows Local Security Authority Subsystem Service out-of-bounds write](https://junglewise.ai/threats/cve-2026-96219-out-of-bounds-write-in-windows-local-security-authority-subsystem) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-85792: Microsoft Windows Routing and Remote Access Service remote code execution](https://junglewise.ai/threats/cve-2026-85792-remote-code-execution-in-windows-routing-and-remote-access) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-97815: Microsoft Windows Error Reporting heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-97815-heap-based-buffer-overflow-in-windows-error-reporting-allows-an) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-96096: Windows Media Player heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-96096-heap-based-buffer-overflow-in-windows-media-player-allows-an) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-83869: DNS Server integer underflow remote code execution](https://junglewise.ai/threats/cve-2026-83869-integer-underflow-wrap-or-wraparound-in-dns-server-allows-an) (critical, CVSS 9.8, published 13 Oct 2026) ## Vulnerabilities per week 196 vulnerabilities in the last four weeks, up from none in the four before. 11 critical against 0, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 27 Jul 2026 | 0 | 0 | 0 | | 3 Aug 2026 | 0 | 0 | 0 | | 10 Aug 2026 | 0 | 0 | 0 | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 196 | 11 | 1 | | 19 Oct 2026 | 0 | 0 | 0 | ## Other Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows-): 1,706 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 588 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 493 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 486 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 473 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 469 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 461 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 455 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 427 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 427 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 359 vulnerabilities - [Microsoft Windows 10 22h2](https://junglewise.ai/threats/technologies/windows-10-22h2): 358 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft Windows 11 26h2 vulnerabilities", https://junglewise.ai/threats/technologies/windows-11-26h2, 19 October 2026.