cve.bz

microsoft windows 11 23h2 vulnerabilities, newest first

Filter
  1. 6.5CVE-2026-97844EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  2. 6.5CVE-2026-97843EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  3. 6.5CVE-2026-97842EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  4. 6.5CVE-2026-97841EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  5. 6.5CVE-2026-97840EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  6. 6.5CVE-2026-97839EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  7. 6.5CVE-2026-97838EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  8. 6.5CVE-2026-97837EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  9. 6.5CVE-2026-97836EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  10. 6.5CVE-2026-97835EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  11. 6.5CVE-2026-97834EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  12. 6.5CVE-2026-97833EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  13. 6.5CVE-2026-97832EPSS 0.8%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  14. 6.5CVE-2026-97831EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  15. 7.5CVE-2026-97830EPSS 1.1%

    Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

  16. 6.5CVE-2026-97829EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  17. 6.5CVE-2026-97828EPSS 0.9%

    Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.

  18. 6.5CVE-2026-97827EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  19. 6.5CVE-2026-97826EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  20. 6.5CVE-2026-97825EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  21. 6.5CVE-2026-97824EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  22. 6.5CVE-2026-97823EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  23. 6.5CVE-2026-97822EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  24. 6.5CVE-2026-97821EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  25. 6.5CVE-2026-97820EPSS 0.9%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  26. 6.5CVE-2026-97819EPSS 1.1%

    Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

  27. 6.5CVE-2026-97817EPSS 1.1%

    Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.

  28. 9.8CVE-2026-97816EPSS 1.0%

    Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

  29. 9.8CVE-2026-97815EPSS 0.9%

    Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

  30. 9.8CVE-2026-97814EPSS 1.1%

    Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

  31. 6.5CVE-2026-97813EPSS 1.1%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

  32. 7.0CVE-2026-97812EPSS 0.3%

    Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2026-97811EPSS 0.3%

    Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2026-97809EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  35. 7.0CVE-2026-97808EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-97807EPSS 0.3%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2026-97806EPSS 0.4%

    Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

  38. 9.8CVE-2026-97805EPSS 1.1%

    Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

  39. 7.8CVE-2026-97804EPSS 0.3%

    Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-97798EPSS 0.4%

    Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-97794EPSS 0.3%

    Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  42. 7.0CVE-2026-97793EPSS 0.2%

    Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.

  43. 7.8CVE-2026-97792EPSS 0.3%

    Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  44. 7.5CVE-2026-97788EPSS 0.9%

    Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

  45. 7.0CVE-2026-97787EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  46. 7.8CVE-2026-96953EPSS 0.3%

    Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

  47. 8.8CVE-2026-96952EPSS 0.9%

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

  48. 8.8CVE-2026-96951KEVEPSS 9.8%

    Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

  49. 7.8CVE-2026-96950EPSS 0.4%

    Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  50. 7.0CVE-2026-96949EPSS 0.2%

    Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.