cbcvebase.

Microsoft Windows 11 Version 23H2 vulnerabilities

3,420 known vulnerabilities affecting microsoft/windows_11_version_23h2.

Total CVEs
3,420
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2453MEDIUM859LOW8

Vulnerabilities

Page 31 of 171
CVE-2026-69623P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69623 [HIGH] CWE-122 CVE-2026-69623: Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute c Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.
nvd
CVE-2026-20922P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20922 [HIGH] CWE-122 CVE-2026-20922: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-69847P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69847 [HIGH] CWE-122 CVE-2026-69847: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
nvd
CVE-2024-38148P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38148 [HIGH] CWE-125 CVE-2024-38148: Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2026-23674P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.67832026-03-10
CVE-2026-23674 [HIGH] CWE-41 CVE-2026-23674: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-70108P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70108 [HIGH] CWE-122 CVE-2026-70108: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70106P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70106 [HIGH] CWE-122 CVE-2026-70106: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96929P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-96929 [HIGH] CWE-122 CVE-2026-96929: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70054P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70054 [HIGH] CWE-122 CVE-2026-70054: Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85908P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85908 [HIGH] CWE-122 CVE-2026-85908: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70286P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70286 [HIGH] CWE-122 CVE-2026-70286: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83867P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83867 [HIGH] CWE-122 CVE-2026-83867: Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85901P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85901 [HIGH] CWE-122 CVE-2026-85901: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70255P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70255 [HIGH] CWE-122 CVE-2026-70255: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70010P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70010 [HIGH] CWE-122 CVE-2026-70010: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69471P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-69471 [HIGH] CWE-122 CVE-2026-69471: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70138P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70138 [HIGH] CWE-122 CVE-2026-70138: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70059P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70059 [HIGH] CWE-122 CVE-2026-70059: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83709P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83709 [HIGH] CWE-122 CVE-2026-83709: Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83678P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83678 [HIGH] CWE-122 CVE-2026-83678: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
Microsoft Windows 11 Version 23H2 vulnerabilities | cvebase