Microsoft Windows 11 23H2 vulnerabilities
2,851 known vulnerabilities affecting microsoft/windows_11_23h2.
Total CVEs
2,851
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL79HIGH2055MEDIUM710LOW7
Vulnerabilities
Page 32 of 143
CVE-2026-69478P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69478 [HIGH] CWE-122 CVE-2026-69478: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72941P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-72941 [HIGH] CWE-122 CVE-2026-72941: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83967P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83967 [HIGH] CWE-122 CVE-2026-83967: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69456P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69456 [HIGH] CWE-122 CVE-2026-69456: Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate priv
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69691P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69691 [HIGH] CWE-122 CVE-2026-69691: Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69476P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69476 [HIGH] CWE-122 CVE-2026-69476: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69432P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69432 [HIGH] CWE-122 CVE-2026-69432: Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privile
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70583P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-70583 [HIGH] CWE-122 CVE-2026-70583: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72967P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-72967 [HIGH] CWE-122 CVE-2026-72967: Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to ele
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83988P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83988 [HIGH] CWE-122 CVE-2026-83988: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72944P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-72944 [HIGH] CWE-122 CVE-2026-72944: Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69604P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69604 [HIGH] CWE-122 CVE-2026-69604: Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68841P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-68841 [HIGH] CWE-122 CVE-2026-68841: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73020P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-73020 [HIGH] CWE-122 CVE-2026-73020: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73000P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-73000 [HIGH] CWE-122 CVE-2026-73000: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83986P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83986 [HIGH] CWE-122 CVE-2026-83986: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69459P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69459 [HIGH] CWE-122 CVE-2026-69459: Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83976P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83976 [HIGH] CWE-122 CVE-2026-83976: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83954P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83954 [HIGH] CWE-122 CVE-2026-83954: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83978P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83978 [HIGH] CWE-122 CVE-2026-83978: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd