Microsoft Windows 11 23H2 vulnerabilities

CVE-2026-73024 [HIGH] CWE-122 CVE-2026-73024: Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attack Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-68844 [HIGH] CWE-122 CVE-2026-68844: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to exe Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

CVE-2026-69921 [HIGH] CWE-122 CVE-2026-69921: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-69389 [HIGH] CWE-122 CVE-2026-69389: Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to e Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

CVE-2026-70564 [HIGH] CWE-122 CVE-2026-70564: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-68845 [HIGH] CWE-122 CVE-2026-68845: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68877 [HIGH] CWE-122 CVE-2026-68877: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to exe Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

CVE-2026-69424 [HIGH] CWE-122 CVE-2026-69424: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69426 [HIGH] CWE-122 CVE-2026-69426: Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code loca Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.

CVE-2026-69277 [HIGH] CWE-121 CVE-2026-69277: Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authoriz Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-62739 [HIGH] CWE-122 CVE-2026-62739: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-61355 [HIGH] CWE-122 CVE-2026-61355: Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62719 [HIGH] CWE-122 CVE-2026-62719: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-61926 [HIGH] CWE-122 CVE-2026-61926: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62811 [HIGH] CWE-122 CVE-2026-62811: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62770 [HIGH] CWE-122 CVE-2026-62770: Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges loca Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-66799 [HIGH] CWE-122 CVE-2026-66799: Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.

CVE-2026-65790 [HIGH] CWE-122 CVE-2026-65790: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-62736 [HIGH] CWE-122 CVE-2026-62736: Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

CVE-2026-62717 [HIGH] CWE-122 CVE-2026-62717: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.