Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 23H2

Is your version affected?

CVE Summary Score Published
CVE-2026-69603 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally 8.8 High Sep 8, 2026
CVE-2026-69576 Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69604 Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69580 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69589 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69583 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69548 Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical… 4.6 Medium Sep 8, 2026
CVE-2026-69518 Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69469 Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to… 6.6 Medium Sep 8, 2026
CVE-2026-69501 Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69394 Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69383 External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69293 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-68887 Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a… 7.5 High Sep 8, 2026
CVE-2026-68877 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally 7.8 High Sep 8, 2026
CVE-2026-68844 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally 7.8 High Sep 8, 2026
CVE-2026-68825 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-68837 Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-72963 Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-72962 Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally 8.2 High Sep 8, 2026
CVE-2026-72945 Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-72944 Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-72935 Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally 6.7 Medium Sep 8, 2026
CVE-2026-72939 Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny… 6.5 Medium Sep 8, 2026
CVE-2026-71351 Double free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges… 7.0 High Sep 8, 2026

Other Microsoft products