Microsoft Windows 11 23h2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 23h2: 1844 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_11_23h2
CVE-2026-83977
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83976
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83975
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83974
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83973
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83972
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83971
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83970
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83969
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83968
High · 7.8
CWE-400 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83967
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83955
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83954
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83942
High · 7.8
CWE-862 Sep 8, 2026
Windows Kernel Elevation of Privilege Vulnerability
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83940
High · 7.0
CWE-416 Sep 8, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83501
Medium · 5.5
CWE-125 Sep 8, 2026
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
CVE-2026-83498
High · 7.8
CWE-822 Sep 8, 2026
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-81963
High · 7.8
KEV High · 46 CWE-59 Sep 8, 2026
Microsoft Windows Link Following Vulnerability
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2026-81355
High · 7.8
CWE-122 Sep 8, 2026
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVE-2026-81354
High · 8.2
CWE-122 Sep 8, 2026
Windows Hello Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-80096
High · 8.8
CWE-125 Sep 8, 2026
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-80093
High · 7.0
CWE-416 Sep 8, 2026
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-80083
High · 8.8
CWE-822 Sep 8, 2026
Windows Hyper-V Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-78516
Medium · 4.3
CWE-126 Sep 8, 2026
Windows Storage Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-78508
Medium · 4.6
CWE-125 Sep 8, 2026
Windows CD-ROM Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.