Windows 11 23h2

windows_11_23h2

Vendor: Microsoft • 1,843 CVEs

CVEs (1,843)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-81963 1Microsoft 5Windows 11 23h2 Windows 11 24h2Windows 11 25h2+2 more Sep 8, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2026-62727 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Sep 8, 2026 Aug 19, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70347 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70346 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70345 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70344 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70330 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 18, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-70307 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-70304 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 17, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-68820 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-66799 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-65814 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-65799 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 17, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65798 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 17, 2026 Aug 11, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65797 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 17, 2026 Aug 11, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65795 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Aug 21, 2026 Aug 11, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65794 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-65790 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-65788 1Microsoft 5Windows 11 23h2 Windows 11 24h2Windows 11 25h2+2 more Aug 14, 2026 Aug 11, 2026 N/A· v4 7.0 HIGH· v3 N/A· v2 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65787 1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 more Aug 16, 2026 Aug 11, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

12 3 4 5...93 Next