Microsoft Windows 11 version 23H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 version 23H2: 2391 record(s), with affected versions and fixes.
CVE-2026-69290
High · 7.8
CWE-121 Sep 8, 2026
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-69289
High · 7.8
CWE-59 Sep 8, 2026
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
CVE-2026-69288
Medium · 5.5
CWE-908 Sep 8, 2026
Windows GDI+ Information Disclosure Vulnerability
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
CVE-2026-69287
High · 7.0
CWE-416 Sep 8, 2026
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-69286
Medium · 5.5
CWE-20 Sep 8, 2026
Windows USB Audio Class Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to disclose information locally.
CVE-2026-69284
High · 7.8
CWE-122 Sep 8, 2026
Windows DCOM Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
CVE-2026-69283
High · 7.8
CWE-122 Sep 8, 2026
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69281
High · 7.0
CWE-416 Sep 8, 2026
Windows License Manager Elevation of Privilege Vulnerability
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69280
High · 7.0
CWE-416 Sep 8, 2026
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-69279
High · 7.0
CWE-416 Sep 8, 2026
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69277
High · 7.8
CWE-121 Sep 8, 2026
Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-69276
Critical · 9.8
CWE-122 Sep 8, 2026
Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
CVE-2026-69275
High · 7.0
CWE-416 Sep 8, 2026
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69274
High · 7.1
CWE-416 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69272
High · 7.1
CWE-122 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69271
High · 8.0
CWE-122 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69270
High · 7.8
CWE-20 Sep 8, 2026
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69269
High · 7.8
CWE-191 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-69267
Medium · 6.5
CWE-1220 Sep 8, 2026
Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
Insufficient granularity of access control in Windows Connected User Experiences and Telemetry allows an authorized attacker to disclose information locally.
CVE-2026-69265
High · 7.8
CWE-125 Sep 8, 2026
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68898
Medium · 6.5
CWE-125 Sep 8, 2026
Windows iSCSI Denial of Service Vulnerability
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
CVE-2026-68897
High · 7.0
CWE-122 Sep 8, 2026
Microsoft Standard XPS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
CVE-2026-68896
High · 7.8
CWE-36 Sep 8, 2026
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-68895
Medium · 5.5
CWE-197 Sep 8, 2026
Internet Storage Name Service Information Disclosure Vulnerability
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
CVE-2026-68894
High · 8.0
CWE-122 Sep 8, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.