Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 23H2

Is your version affected?

CVE Summary Score Published
CVE-2026-69875 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-69711 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69694 Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to… 7.0 High Sep 8, 2026
CVE-2026-69717 Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-69693 Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69859 Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an… 7.0 High Sep 8, 2026
CVE-2026-69638 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally 8.4 High Sep 8, 2026
CVE-2026-69790 Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69627 Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information… 5.5 Medium Sep 8, 2026
CVE-2026-69628 Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69689 Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network 8.0 High Sep 8, 2026
CVE-2026-69623 Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network 8.0 High Sep 8, 2026
CVE-2026-69684 Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to… 5.5 Medium Sep 8, 2026
CVE-2026-69645 Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69648 Use after free in Windows Notification allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69605 Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69609 Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69587 Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network 7.5 High Sep 8, 2026
CVE-2026-69588 Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service… 7.5 High Sep 8, 2026
CVE-2026-69585 Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate… 7.8 High Sep 8, 2026
CVE-2026-69608 Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges… 7.8 High Sep 8, 2026
CVE-2026-69554 Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to… 5.5 Medium Sep 8, 2026
CVE-2026-69572 Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network 5.7 Medium Sep 8, 2026
CVE-2026-69552 Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized… 5.7 Medium Sep 8, 2026
CVE-2026-69553 Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network 7.1 High Sep 8, 2026

Other Microsoft products