← Back

Windows 11 23h2

windows_11_23h2

Vendor: Microsoft • 2,867 CVEs

CVEs (2,867)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 16, 2026
Oct 13, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
1Microsoft
7Windows 11 23h2
Windows 11 24h2Windows 11 25h2+4 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
1Microsoft
6Windows 11 23h2
Windows 11 24h2Windows 11 25h2+3 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
1Microsoft
7Windows 10 21h2
Windows 10 22h2Windows 11 23h2+4 more
Oct 21, 2026
Oct 13, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.