cbcvebase.

Microsoft Windows 11 Version 23H2 vulnerabilities

3,420 known vulnerabilities affecting microsoft/windows_11_version_23h2.

Total CVEs
3,420
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2453MEDIUM859LOW8

Vulnerabilities

Page 32 of 171
CVE-2026-83779P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83779 [HIGH] CWE-122 CVE-2026-83779: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83757P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83757 [HIGH] CWE-122 CVE-2026-83757: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83652P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83652 [HIGH] CWE-122 CVE-2026-83652: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83691P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83691 [HIGH] CWE-122 CVE-2026-83691: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83861P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83861 [HIGH] CWE-122 CVE-2026-83861: Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to eleva Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69284P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69284 [HIGH] CWE-122 CVE-2026-69284: Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71337P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-71337 [HIGH] CWE-121 CVE-2026-71337: Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69290P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69290 [HIGH] CWE-121 CVE-2026-69290: Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to el Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69391P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69391 [HIGH] CWE-121 CVE-2026-69391: Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker t Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65672P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-65672 [HIGH] CWE-122 CVE-2026-65672: Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62692P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-62692 [HIGH] CWE-122 CVE-2026-62692: Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to eleva Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70344P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-70344 [HIGH] CWE-121 CVE-2026-70344: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62768P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-62768 [HIGH] CWE-121 CVE-2026-62768: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65671P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-65671 [HIGH] CWE-122 CVE-2026-65671: Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70346P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-70346 [HIGH] CWE-121 CVE-2026-70346: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85368P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85368 [HIGH] CWE-122 CVE-2026-85368: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83767P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83767 [HIGH] CWE-121 CVE-2026-83767: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-20849P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20849 [HIGH] CWE-807 CVE-2026-20849: Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacke Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-85867P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85867 [HIGH] CWE-122 CVE-2026-85867: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69793P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69793 [HIGH] CWE-1288 CVE-2026-69793: Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
nvd
Microsoft Windows 11 Version 23H2 vulnerabilities | cvebase