Microsoft Windows 11 version 23H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 version 23H2: 2391 record(s), with affected versions and fixes.
CVE-2026-83908
High · 7.0
CWE-763 Oct 13, 2026
RPC Runtime Elevation of Privilege Vulnerability
Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
CVE-2026-83907
Medium · 5.5
CWE-497 Oct 13, 2026
Windows Hello Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
CVE-2026-83906
Medium · 6.5
CWE-303 Oct 13, 2026
Windows Shell Spoofing Vulnerability
Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-83905
Medium · 4.7
CWE-497 Oct 13, 2026
Windows Shell Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
CVE-2026-83904
Medium · 5.5
CWE-125 Oct 13, 2026
HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83902
High · 7.8
CWE-122 Oct 13, 2026
Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83901
High · 7.0
CWE-416 Oct 13, 2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83900
High · 7.0
CWE-416 Oct 13, 2026
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83899
High · 7.0
CWE-362 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83898
Medium · 5.5
CWE-125 Oct 13, 2026
HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83897
Medium · 4.7
CWE-497 Oct 13, 2026
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-83896
High · 7.8
CWE-122 Oct 13, 2026
Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83895
Medium · 6.8
CWE-122 Oct 13, 2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83893
Medium · 5.5
CWE-497 Oct 13, 2026
Windows Clipboard User Service Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
CVE-2026-83892
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83889
High · 8.8
CWE-763 Oct 13, 2026
Windows DNS Server Remote Code Execution Vulnerability
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-83888
Medium · 6.5
CWE-126 Oct 13, 2026
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83887
Medium · 5.5
CWE-125 Oct 13, 2026
HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83886
High · 7.0
CWE-416 Oct 13, 2026
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83884
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83883
High · 7.8
CWE-416 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83882
High · 7.8
CWE-122 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83881
High · 7.8
CWE-122 Oct 13, 2026
Windows exFAT File System Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-83879
High · 7.0
CWE-362 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83877
High · 7.8
CWE-190 Oct 13, 2026
Windows Devices Human Interface Elevation of Privilege Vulnerability
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.