Microsoft Windows 11 23H2 vulnerabilities

CVE-2026-62877 [HIGH] CWE-121 CVE-2026-62877: Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges lo Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-70346 [HIGH] CWE-121 CVE-2026-70346: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88093 [HIGH] CWE-122 CVE-2026-88093: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-20849 [HIGH] CWE-807 CVE-2026-20849: Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacke Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

CVE-2026-69793 [HIGH] CWE-1288 CVE-2026-69793: Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70095 [HIGH] CWE-122 CVE-2026-70095: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-96071 [HIGH] CWE-122 CVE-2026-96071: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVE-2026-69602 [HIGH] CWE-416 CVE-2026-69602: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges o Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

CVE-2026-69706 [HIGH] CWE-416 CVE-2026-69706: Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-69597 [HIGH] CWE-416 CVE-2026-69597: Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a networ Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.

CVE-2026-78446 [HIGH] CWE-416 CVE-2026-78446: Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute cod Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-85798 [HIGH] CWE-122 CVE-2026-85798: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2025-59199 [HIGH] CWE-284 CVE-2025-59199: Improper access control in Software Protection Platform (SPP) allows an authorized attacker to eleva Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.

CVE-2025-21332 [HIGH] CWE-41 CVE-2025-21332: MapUrlToZone Security Feature Bypass Vulnerability MapUrlToZone Security Feature Bypass Vulnerability

CVE-2024-49117 [HIGH] CWE-393 CVE-2024-49117: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability

CVE-2026-88091 [HIGH] CWE-502 CVE-2026-88091: Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacke Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-96914 [HIGH] CWE-122 CVE-2026-96914: Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an auth Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-69945 [HIGH] CWE-862 CVE-2026-69945: Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

CVE-2026-21231 [HIGH] CWE-362 CVE-2026-21231: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-33835 [HIGH] CWE-416 CVE-2026-33835: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.