Microsoft: >> Windows 11 26h1 >> 10.0.28000.1575 Security Vulnerabilities
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
CVSS Score
8.1
EPSS Score
0.011
Published
2026-10-13
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-10-13
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.005
Published
2026-10-13
Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.
CVSS Score
5.5
EPSS Score
0.004
Published
2026-10-13
Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-10-13
Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-10-13
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.
CVSS Score
5.5
EPSS Score
0.005
Published
2026-10-13
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-10-13
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.
CVSS Score
5.5
EPSS Score
0.004
Published
2026-10-13
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-10-13