Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 23H2

Is your version affected?

CVE Summary Score Published
CVE-2026-62711 Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-62710 Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges… 7.8 High Aug 11, 2026
CVE-2026-62709 Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-62701 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-62698 Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-62700 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61929 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-61918 Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network 6.5 Medium Aug 11, 2026
CVE-2026-61921 Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network 6.5 Medium Aug 11, 2026
CVE-2026-61926 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61360 Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-61358 Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe)… 7.8 High Aug 11, 2026
CVE-2026-61364 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate… 7.8 High Aug 11, 2026
CVE-2026-61365 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate… 7.8 High Aug 11, 2026
CVE-2026-61359 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61355 Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61363 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 7.5 High Aug 11, 2026
CVE-2026-59131 No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally 5.6 Medium Aug 11, 2026
CVE-2026-61349 Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-59125 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-59126 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging… 7.0 High Aug 11, 2026
CVE-2026-59122 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service… 7.0 High Aug 11, 2026
CVE-2026-70347 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-70345 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-70346 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026

Other Microsoft products