Microsoft Windows 11 23H2 vulnerabilities

CVE-2026-62735 [HIGH] CWE-122 CVE-2026-62735: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62890 [HIGH] CWE-122 CVE-2026-62890: Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

CVE-2026-58601 [HIGH] CWE-122 CVE-2026-58601: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85800 [HIGH] CWE-122 CVE-2026-85800: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-85822 [HIGH] CWE-122 CVE-2026-85822: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

CVE-2026-85327 [HIGH] CWE-122 CVE-2026-85327: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85915 [HIGH] CWE-122 CVE-2026-85915: Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96920 [HIGH] CWE-122 CVE-2026-96920: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88168 [HIGH] CWE-122 CVE-2026-88168: Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-40377 [HIGH] CWE-122 CVE-2026-40377: Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevat Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

CVE-2026-88193 [HIGH] CWE-122 CVE-2026-88193: Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate pr Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-69528 [HIGH] CWE-306 CVE-2026-69528: Missing authentication for critical function in Windows Shell allows an authorized attacker to eleva Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-61365 [HIGH] CWE-306 CVE-2026-61365: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61356 [HIGH] CWE-306 CVE-2026-61356: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61364 [HIGH] CWE-306 CVE-2026-61364: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61367 [HIGH] CWE-306 CVE-2026-61367: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-62777 [HIGH] CWE-306 CVE-2026-62777: Missing authentication for critical function in Windows License Manager allows an authorized attacke Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-45638 [HIGH] CWE-122 CVE-2026-45638: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-40406 [HIGH] CWE-416 CVE-2026-40406: Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a netw Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.

CVE-2024-38241 [HIGH] CWE-20 CVE-2024-38241: Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability