Microsoft Windows 11 version 23H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 version 23H2: 2391 record(s), with affected versions and fixes.
CVE-2026-83876
High · 7.8
CWE-416 Oct 13, 2026
Windows Shell Elevation of Privilege Vulnerability
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83875
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83874
High · 8.8
CWE-122 Oct 13, 2026
Windows Event Tracing Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
CVE-2026-83873
High · 7.8
CWE-23 Oct 13, 2026
Windows Shell Elevation of Privilege Vulnerability
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83872
High · 7.8
CWE-681 Oct 13, 2026
Windows TCP/IP Local Elevation of Privilege Vulnerability
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83871
High · 7.0
CWE-122 Oct 13, 2026
Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-83869
Critical · 9.8
CWE-191 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83868
High · 7.0
CWE-362 Oct 13, 2026
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83867
High · 7.8
CWE-122 Oct 13, 2026
Windows Push Notifications Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-83866
High · 7.0
CWE-416 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83865
Medium · 4.7
CWE-23 Oct 13, 2026
Windows Internet (wininet.dll) Tampering Vulnerability
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
CVE-2026-83864
Medium · 5.5
CWE-290 Oct 13, 2026
Windows NTFS Information Disclosure Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-83863
High · 7.8
CWE-122 Oct 13, 2026
Servicing Stack Updates Elevation of Privilege Vulnerability
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
CVE-2026-83861
High · 7.8
CWE-122 Oct 13, 2026
Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
CVE-2026-83860
High · 7.5
CWE-121 Oct 13, 2026
Windows GDI Denial of Service Vulnerability
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
CVE-2026-83859
High · 7.8
CWE-416 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83857
High · 7.8
CWE-121 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83856
High · 7.5
CWE-125 Oct 13, 2026
Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-83855
High · 7.5
CWE-191 Oct 13, 2026
Windows WLAN Service Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
CVE-2026-83854
Medium · 5.5
CWE-306 Oct 13, 2026
Windows Notification Information Disclosure Vulnerability
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
CVE-2026-83853
High · 7.0
CWE-416 Oct 13, 2026
Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83851
High · 8.8
CWE-122 Oct 13, 2026
Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83850
High · 7.8
CWE-122 Oct 13, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83849
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Hello Information Disclosure Vulnerability
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
CVE-2026-83848
High · 7.8
CWE-822 Oct 13, 2026
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.