Microsoft Windows 11 Version 23H2 vulnerabilities

CVE-2026-77504 [HIGH] CWE-415 CVE-2026-77504: Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-69772 [HIGH] CWE-122 CVE-2026-69772: Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.

CVE-2026-69495 [HIGH] CWE-122 CVE-2026-69495: Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execu Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-69511 [HIGH] CWE-122 CVE-2026-69511: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69434 [HIGH] CWE-122 CVE-2026-69434: Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.

CVE-2026-72933 [HIGH] CWE-122 CVE-2026-72933: Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.

CVE-2026-69669 [HIGH] CWE-122 CVE-2026-69669: Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.

CVE-2026-83992 [HIGH] CWE-122 CVE-2026-83992: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73013 [HIGH] CWE-122 CVE-2026-73013: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-62795 [HIGH] CWE-416 CVE-2026-62795: Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attack Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.

CVE-2026-83725 [HIGH] CWE-122 CVE-2026-83725: Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69326 [HIGH] CWE-122 CVE-2026-69326: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-69689 [HIGH] CWE-121 CVE-2026-69689: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a netw Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-69717 [HIGH] CWE-125 CVE-2026-69717: Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privi Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

CVE-2026-47653 [HIGH] CWE-416 CVE-2026-47653: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-88157 [HIGH] CWE-122 CVE-2026-88157: Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-85905 [HIGH] CWE-122 CVE-2026-85905: Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate p Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83716 [HIGH] CWE-122 CVE-2026-83716: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-20860 [HIGH] CWE-843 CVE-2026-20860: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-33837 [HIGH] CWE-122 CVE-2026-33837: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.