Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 23H2

Is your version affected?

CVE Summary Score Published
CVE-2026-72988 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-72990 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-72995 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-72985 Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a… 6.8 Medium Sep 8, 2026
CVE-2026-70570 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 7.5 High Sep 8, 2026
CVE-2026-70203 Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-70296 Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69906 Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally 8.2 High Sep 8, 2026
CVE-2026-69441 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer… 7.0 High Sep 8, 2026
CVE-2026-69601 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over… 8.8 High Sep 8, 2026
CVE-2026-69590 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 9.8 Critical Sep 8, 2026
CVE-2026-69575 Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69568 Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69593 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69560 Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69499 Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a… 8.8 High Sep 8, 2026
CVE-2026-69489 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69490 Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a… 6.8 Medium Sep 8, 2026
CVE-2026-69426 Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally 7.8 High Sep 8, 2026
CVE-2026-69397 Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network 7.5 High Sep 8, 2026
CVE-2026-69392 Use after free in Windows Shell allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69352 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69910 Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69298 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69311 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026

Other Microsoft products