Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 23H2

Is your version affected?

CVE Summary Score Published
CVE-2026-71349 Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical… 6.8 Medium Sep 8, 2026
CVE-2026-70579 Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network 7.5 High Sep 8, 2026
CVE-2026-70583 Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-70578 Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70577 Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70581 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-70575 Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network 5.3 Medium Sep 8, 2026
CVE-2026-70572 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-70569 Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-70573 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70568 Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026
CVE-2026-70565 Use after free in Windows AF_UNIX Socket Provider allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-70574 Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69784 Use after free in Windows Hello allows an authorized attacker to elevate privileges locally 8.8 High Sep 8, 2026
CVE-2026-69820 Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally 8.2 High Sep 8, 2026
CVE-2026-69864 Use after free in Windows Hello allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69725 Double free in Windows Hello allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69874 Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally 8.2 High Sep 8, 2026
CVE-2026-69710 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an… 7.5 High Sep 8, 2026
CVE-2026-69786 Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-69799 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an… 7.8 High Sep 8, 2026
CVE-2026-69852 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 7.5 High Sep 8, 2026
CVE-2026-69769 Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69829 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69807 Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an… 8.0 High Sep 8, 2026

Other Microsoft products