← Back

Windows 11 23h2

windows_11_23h2

Vendor: Microsoft • 2,867 CVEs

CVEs (2,867)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 23, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 28, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 28, 2026
Sep 8, 2026
N/A· v4
6.4 MEDIUM· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 11, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
1Microsoft
6Windows 10 21h2
Windows 10 22h2Windows 11 23h2+3 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network.
1Microsoft
6Windows 10 21h2
Windows 10 22h2Windows 11 23h2+3 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
1Microsoft
6Windows 11 23h2
Windows 11 24h2Windows 11 25h2+3 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 11, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 11, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
1Microsoft
6Windows 11 23h2
Windows 11 24h2Windows 11 25h2+3 more
Sep 16, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.