Skip to content

Vulnerabilities of Microsoft Windows 11 Version 23H2

Is your version affected?

CVE Summary Score Published
CVE-2026-70153 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a… 9.8 Critical Oct 13, 2026
CVE-2026-88112 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-88114 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-88116 Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-88093 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70111 Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network 8.1 High Oct 13, 2026
CVE-2026-70158 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access… 8.8 High Oct 13, 2026
CVE-2026-70160 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70184 Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-70227 Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70228 Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70229 Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a… 8.1 High Oct 13, 2026
CVE-2026-70260 Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an… 5.5 Medium Oct 13, 2026
CVE-2026-70261 Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an… 5.5 Medium Oct 13, 2026
CVE-2026-69915 Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70054 Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70143 Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-70122 Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to… 6.5 Medium Oct 13, 2026
CVE-2026-70084 Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70112 Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-70148 Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information… 6.5 Medium Oct 13, 2026
CVE-2026-69884 Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-69902 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally 6.7 Medium Oct 13, 2026
CVE-2026-88177 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88188 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026

Other Microsoft products