cbcvebase.

Microsoft Windows 11 23H2 vulnerabilities

3,245 known vulnerabilities affecting microsoft/windows_11_23h2.

Total CVEs
3,245
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL92HIGH2343MEDIUM803LOW7

Vulnerabilities

Page 52 of 163
CVE-2026-70023P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-70023 [HIGH] CWE-416 CVE-2026-70023: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83883P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-83883 [HIGH] CWE-416 CVE-2026-83883: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87716P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-87716 [HIGH] CWE-122 CVE-2026-87716: Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to d Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-83700P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-83700 [HIGH] CWE-416 CVE-2026-83700: Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privi Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83712P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-83712 [HIGH] CWE-787 CVE-2026-83712: Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-83762P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-83762 [HIGH] CWE-416 CVE-2026-83762: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85945P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-85945 [HIGH] CWE-416 CVE-2026-85945: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88134P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-88134 [HIGH] CWE-416 CVE-2026-88134: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83796P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-83796 [HIGH] CWE-416 CVE-2026-83796: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87694P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-87694 [HIGH] CWE-416 CVE-2026-87694: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83859P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-83859 [HIGH] CWE-416 CVE-2026-83859: Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-35417P3HIGHCVSS 7.8fixed in 10.0.22631.70792026-05-12
CVE-2026-35417 [HIGH] CWE-843 CVE-2026-35417: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83922P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-83922 [HIGH] CWE-416 CVE-2026-83922: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85906P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-85906 [HIGH] CWE-416 CVE-2026-85906: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83912P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-83912 [HIGH] CWE-416 CVE-2026-83912: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71345P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-71345 [HIGH] CWE-787 CVE-2026-71345: Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
nvd
CVE-2026-62697P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-62697 [HIGH] CWE-416 CVE-2026-62697: Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-56172P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-56172 [HIGH] CWE-416 CVE-2026-56172: Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges lo Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69270P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69270 [HIGH] CWE-20 CVE-2026-69270: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69307P3HIGHCVSS 7.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69307 [HIGH] CWE-122 CVE-2026-69307: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
← Previous52 / 163Next →
Microsoft Windows 11 23H2 vulnerabilities | cvebase