CVE Tools
Track your stack

Windows 11

5,844 CVEs tracked. 107 of them are in CISA KEV.

This hub aggregates every CVE we track for Windows 11, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Windows 11 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Windows 11 CVEs per month
MonthCVEs
2024-1248
2025-01126
2025-0235
2025-0336
2025-0467
2025-0539
2025-0640
2025-0786
2025-0858
2025-0954
2025-10121
2025-1138
2025-1237
2026-0187
2026-0228
2026-0344
2026-04123
2026-0562
2026-06114
2026-07384
2026-08203
2026-09635
2026-101035
2026-11673

Severity

How the 5,844 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1533%
  • High4,20372%
  • Medium1,47225%
  • Low150%

Latest CVEs

The 15 most recently published vulnerabilities affecting Windows 11.

  1. CVE-2026-118148Active Directory Domain Services Elevation of Privilege Vulnerability7.5
  2. CVE-2026-119382Windows TPM Elevation of Privilege Vulnerability7.8
  3. CVE-2026-122475Windows Storage Spaces Controller Remote Code Execution Vulnerability8.8
  4. CVE-2026-122474Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability5.9
  5. CVE-2026-122183Windows Kernel Elevation of Privilege Vulnerability7.8
  6. CVE-2026-122297Windows Kernel Transaction Manager Information Disclosure Vulnerability5.5
  7. CVE-2026-122182Windows Maps Elevation of Privilege Vulnerability7.0
  8. CVE-2026-122179Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability7.0
  9. CVE-2026-122177Windows iSCSI Elevation of Privilege Vulnerability7.5
  10. CVE-2026-122176Windows SMB Remote Code Execution Vulnerability8.8
  11. CVE-2026-122174Windows Task Scheduler Elevation of Privilege Vulnerability7.0
  12. CVE-2026-122175Windows Autopilot Elevation of Privilege Vulnerability7.0
  13. CVE-2026-122173HID Parser Library Elevation of Privilege Vulnerability6.8
  14. CVE-2026-122172Microsoft Trace Data Helper Elevation of Privilege Vulnerability7.8
  15. CVE-2026-122171Microsoft XPS Document Converter Remote Code Execution Vulnerability8.8

Product grouping is registry-driven, with AI assist and human review. How it works