CVE Intelligence

Microsoft Windows 11 version 23H2 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Windows 11 version 23H2: 2391 record(s), with affected versions and fixes.

CVE-2026-69635 Medium · 6.6 CWE-122 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
CVE-2026-69634 Critical · 9.8 CWE-122 Oct 13, 2026
Windows iSCSI Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69633 High · 7.8 CWE-122 Oct 13, 2026
Windows Update Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
CVE-2026-69596 High · 7.0 CWE-416 Oct 13, 2026
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69521 High · 8.8 CWE-190 Oct 13, 2026
Windows iSCSI Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69506 Medium · 4.7 CWE-125 Oct 13, 2026
Windows Key Storage Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.
CVE-2026-69471 High · 7.8 CWE-122 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-69452 High · 7.1 CWE-416 Oct 13, 2026
Windows Enterprise App Management Elevation of Privilege Vulnerability
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
CVE-2026-69387 High · 7.0 CWE-416 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69363 High · 8.0 CWE-122 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
CVE-2026-69354 High · 7.8 CWE-122 Oct 13, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69326 High · 8.8 CWE-122 Oct 13, 2026
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-68836 High · 7.8 CWE-122 Oct 13, 2026
Windows kernel32.dll Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
CVE-2026-62879 Medium · 5.5 CWE-306 Oct 13, 2026
Windows SmartScreen Tampering Vulnerability
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
CVE-2026-62687 Medium · 5.5 CWE-59 Oct 13, 2026
Windows Backup Engine Information Disclosure Vulnerability
Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.
CVE-2026-61931 High · 7.8 CWE-416 Oct 13, 2026
Windows Perception Simulation Service Elevation of Privilege Vulnerability
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
CVE-2026-59116 Medium · 6.8 CWE-327 Oct 13, 2026
Windows Remote Desktop Security Feature Bypass Vulnerability
Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-49785 High · 7.8 CWE-404 Oct 13, 2026
UEFI Secure Boot Security Feature Bypass Vulnerability
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
CVE-2026-109453 High · 7.0 CWE-122 Oct 13, 2026
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-108468 High · 7.0 CWE-416 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-108467 High · 8.8 CWE-122 Oct 13, 2026
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
CVE-2026-108466 Medium · 5.3 CWE-125 Oct 13, 2026
Windows Kernel Denial of Service Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.
CVE-2026-108465 High · 7.0 CWE-416 Oct 13, 2026
Windows Update Delivery Optimization Elevation of Privilege Vulnerability
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.
CVE-2026-108464 High · 7.0 CWE-416 Oct 13, 2026
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
CVE-2026-108462 Medium · 5.5 CWE-497 Oct 13, 2026
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.