Microsoft Windows 11 23h2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 23h2: 1935 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_11_23h2
CVE-2026-69790
High · 7.8
CWE-122 Sep 8, 2026
Windows Credential Providers Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
CVE-2026-69787
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69786
High · 8.1
CWE-122 Sep 8, 2026
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
CVE-2026-69785
High · 7.8
CWE-426 Sep 8, 2026
Windows Smart Card Elevation of Privilege Vulnerability
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-69784
High · 8.8
CWE-416 Sep 8, 2026
Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69779
High · 7.0
CWE-367 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69775
High · 7.5
CWE-416 Sep 8, 2026
Windows DWM Core Library Elevation of Privilege Vulnerability
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges over a network.
CVE-2026-69773
High · 8.0
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69772
High · 8.8
CWE-122 Sep 8, 2026
Windows Network File System Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
CVE-2026-69771
Medium · 4.7
CWE-59 Sep 8, 2026
Windows Container Manager Service Security Feature Bypass Vulnerability
Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.
CVE-2026-69770
Medium · 5.5
CWE-908 Sep 8, 2026
Windows Spaceport.sys Information Disclosure Vulnerability
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69769
Critical · 9.8
CWE-122 Sep 8, 2026
Windows HTTP Print Provider Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.
CVE-2026-69768
Critical · 9.8
CWE-122 Sep 8, 2026
Windows RNDIS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.
CVE-2026-69762
High · 8.8
CWE-121 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69761
High · 7.5
CWE-416 Sep 8, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69760
High · 7.5
CWE-125 Sep 8, 2026
Windows Kerberos Denial of Service Vulnerability
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVE-2026-69758
High · 7.8
CWE-122 Sep 8, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69757
High · 7.5
CWE-416 Sep 8, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69741
Medium · 5.5
CWE-125 Sep 8, 2026
Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69740
High · 8.8
CWE-416 Sep 8, 2026
Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69738
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69735
High · 7.0
CWE-416 Sep 8, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69732
High · 8.1
CWE-122 Sep 8, 2026
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-69731
High · 7.8
CWE-122 Sep 8, 2026
HID Class Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69727
High · 8.0
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.