Microsoft Windows 11 23H2 vulnerabilities

CVE-2026-83664 [MEDIUM] CWE-843 CVE-2026-83664: Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

CVE-2026-85935 [MEDIUM] CWE-126 CVE-2026-85935: Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

CVE-2026-70280 [MEDIUM] CWE-863 CVE-2026-70280: Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-69979 [MEDIUM] CWE-424 CVE-2026-69979: Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attack Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-83864 [MEDIUM] CWE-290 CVE-2026-83864: Improper access control in Windows NTFS allows an authorized attacker to disclose information locall Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96854 [MEDIUM] CWE-843 CVE-2026-96854: Access of resource using incompatible type ('type confusion') in Windows Device Association Service Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

CVE-2026-81964 [MEDIUM] CWE-798 CVE-2026-81964: Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker t Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-70216 [MEDIUM] CWE-1220 CVE-2026-70216: Insufficient granularity of access control in Windows Mobile Device Management allows an authorized Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

CVE-2026-83854 [MEDIUM] CWE-306 CVE-2026-83854: Improper access control in Windows Notification allows an authorized attacker to disclose informatio Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

CVE-2026-87709 [MEDIUM] CWE-250 CVE-2026-87709: Improper access control in Windows Host Guardian Service allows an authorized attacker to perform ta Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

CVE-2026-72966 [MEDIUM] CWE-862 CVE-2026-72966: Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to p Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

CVE-2026-96316 [MEDIUM] CWE-862 CVE-2026-96316: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

CVE-2026-96855 [MEDIUM] CWE-862 CVE-2026-96855: Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to p Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-96311 [MEDIUM] CWE-862 CVE-2026-96311: Improper authorization in Windows Network List Service allows an authorized attacker to perform tamp Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

CVE-2026-84011 [MEDIUM] CWE-863 CVE-2026-84011: Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security fea Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

CVE-2024-30037 [MEDIUM] CWE-125 CVE-2024-30037: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2026-69474 [MEDIUM] CWE-126 CVE-2026-69474: Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.

CVE-2026-69384 [HIGH] CWE-476 CVE-2026-69384: Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.

CVE-2026-40401 [HIGH] CWE-476 CVE-2026-40401: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally. Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.

CVE-2024-49110 [MEDIUM] CWE-125 CVE-2024-49110: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Windows Mobile Broadband Driver Elevation of Privilege Vulnerability