Microsoft Windows 11 23H2 vulnerabilities

CVE-2026-69585 [HIGH] CWE-704 CVE-2026-69585: Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacke Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69738 [HIGH] CWE-122 CVE-2026-69738: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69900 [HIGH] CWE-822 CVE-2026-69900: Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized atta Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69707 [HIGH] CWE-190 CVE-2026-69707: Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-73002 [HIGH] CWE-190 CVE-2026-73002: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69687 [HIGH] CWE-191 CVE-2026-69687: Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an au Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69535 [HIGH] CWE-122 CVE-2026-69535: Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privilege Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-77489 [HIGH] CWE-476 CVE-2026-77489: Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privi Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69608 [HIGH] CWE-190 CVE-2026-69608: Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker t Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69822 [HIGH] CWE-122 CVE-2026-69822: Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges loc Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.

CVE-2026-70581 [HIGH] CWE-20 CVE-2026-70581: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69450 [HIGH] CWE-125 CVE-2026-69450: Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges lo Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-69561 [HIGH] CWE-125 CVE-2026-69561: Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges loca Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70569 [HIGH] CWE-125 CVE-2026-70569: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-69298 [HIGH] CWE-190 CVE-2026-69298: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70574 [HIGH] CWE-125 CVE-2026-70574: Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to eleva Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70572 [HIGH] CWE-190 CVE-2026-70572: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62751 [HIGH] CWE-190 CVE-2026-62751: Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to ele Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-62876 [HIGH] CWE-125 CVE-2026-62876: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62733 [HIGH] CWE-125 CVE-2026-62733: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.