Microsoft Windows 11 23H2 vulnerabilities
2,851 known vulnerabilities affecting microsoft/windows_11_23h2.
Total CVEs
2,851
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL79HIGH2055MEDIUM710LOW7
Vulnerabilities
Page 35 of 143
CVE-2026-83995P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83995 [HIGH] CWE-122 CVE-2026-83995: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83975P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83975 [HIGH] CWE-122 CVE-2026-83975: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69293P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69293 [HIGH] CWE-20 CVE-2026-69293: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69323P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69323 [HIGH] CWE-122 CVE-2026-69323: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69444P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69444 [HIGH] CWE-122 CVE-2026-69444: Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate priv
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83970P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83970 [HIGH] CWE-122 CVE-2026-83970: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72990P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-72990 [HIGH] CWE-122 CVE-2026-72990: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83983P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-83983 [HIGH] CWE-122 CVE-2026-83983: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-77904P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-77904 [HIGH] CWE-122 CVE-2026-77904: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68888P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-68888 [HIGH] CWE-122 CVE-2026-68888: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73007P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-73007 [HIGH] CWE-122 CVE-2026-73007: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-78447P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-78447 [HIGH] CWE-122 CVE-2026-78447: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73021P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-73021 [HIGH] CWE-20 CVE-2026-73021: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69589P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69589 [HIGH] CWE-122 CVE-2026-69589: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68885P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-68885 [HIGH] CWE-122 CVE-2026-68885: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69420P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69420 [HIGH] CWE-122 CVE-2026-69420: Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72996P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-72996 [HIGH] CWE-20 CVE-2026-72996: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68890P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-68890 [HIGH] CWE-122 CVE-2026-68890: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65787P3HIGHCVSS 7.8fixed in 10.0.22631.75172026-08-11
CVE-2026-65787 [HIGH] CWE-122 CVE-2026-65787: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65814P3HIGHCVSS 7.8fixed in 10.0.22631.75172026-08-11
CVE-2026-65814 [HIGH] CWE-122 CVE-2026-65814: Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
nvd