CVE Tools
Track your stack

Windows 11

5,171 CVEs tracked. 107 of them are in CISA KEV.

This hub aggregates every CVE we track for Windows 11, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Windows 11 CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Windows 11 CVEs per month
MonthCVEs
2024-1134
2024-1248
2025-01126
2025-0235
2025-0336
2025-0467
2025-0539
2025-0640
2025-0786
2025-0858
2025-0954
2025-10121
2025-1138
2025-1237
2026-0187
2026-0228
2026-0344
2026-04123
2026-0562
2026-06114
2026-07384
2026-08203
2026-09635
2026-101035

Severity

How the 5,171 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1433%
  • High3,70772%
  • Medium1,30625%
  • Low140%

Latest CVEs

The 15 most recently published vulnerabilities affecting Windows 11.

  1. CVE-2026-108136Microsoft Windows Search Component Elevation of Privilege Vulnerability7.8
  2. CVE-2026-108463Windows SmartScreen Security Feature Bypass Vulnerability8.8
  3. CVE-2026-108135Windows Backup Engine Elevation of Privilege Vulnerability7.0
  4. CVE-2026-108134Windows Autopilot Elevation of Privilege Vulnerability7.0
  5. CVE-2026-105016Microsoft QUIC Remote Code Execution Vulnerability9.8
  6. CVE-2026-108130Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability7.8
  7. CVE-2026-108132Windows Kerberos Elevation of Privilege Vulnerability7.0
  8. CVE-2026-108129Role: DNS Server Information Disclosure Vulnerability6.5
  9. CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing Vulnerability7.5
  10. CVE-2026-97841Role: DNS Server Information Disclosure Vulnerability6.5
  11. CVE-2026-97840Role: DNS Server Information Disclosure Vulnerability6.5
  12. CVE-2026-97844Role: DNS Server Information Disclosure Vulnerability6.5
  13. CVE-2026-97842Role: DNS Server Information Disclosure Vulnerability6.5
  14. CVE-2026-97843Role: DNS Server Information Disclosure Vulnerability6.5
  15. CVE-2026-97839Role: DNS Server Information Disclosure Vulnerability6.5

Product grouping is registry-driven, with AI assist and human review. How it works