microsoft windows 11 23h2 vulnerabilities, newest first, page 27
Filter
- 6.8CVE-2026-69566EPSS 0.4%
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.
- 7.0CVE-2026-69563EPSS 0.2%
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-69561EPSS 0.3%
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-69560EPSS 0.3%
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-69554EPSS 0.3%
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
- 7.5CVE-2026-69553EPSS 0.5%
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network.
- 5.7CVE-2026-69552EPSS 0.9%
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
- 7.0CVE-2026-69549EPSS 0.3%
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- 4.6CVE-2026-69548EPSS 0.5%
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
- 8.1CVE-2026-69546EPSS 0.7%
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-69541EPSS 0.3%
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-69540EPSS 0.3%
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-69539EPSS 0.7%
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
- 7.8CVE-2026-69538EPSS 0.3%
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally.
- 7.1CVE-2026-69536EPSS 0.6%
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
- 7.8CVE-2026-69535EPSS 0.3%
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-69534EPSS 0.3%
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2026-69532EPSS 0.3%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-69531EPSS 0.3%
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
- 7.8CVE-2026-69528EPSS 0.3%
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.
- 5.5CVE-2026-69527EPSS 0.4%
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.
- 9.8CVE-2026-69525EPSS 1.0%
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
- 8.1CVE-2026-69524EPSS 0.7%
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-69518EPSS 0.8%
Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.
- 7.0CVE-2026-69517EPSS 0.3%
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-69516EPSS 0.3%
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2026-69514EPSS 0.7%
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
- 7.8CVE-2026-69513EPSS 0.3%
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2026-69512EPSS 0.8%
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
- 8.8CVE-2026-69511EPSS 0.8%
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
- 7.8CVE-2026-69509EPSS 0.3%
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
- 5.7CVE-2026-69507EPSS 0.9%
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network.
- 8.0CVE-2026-69505EPSS 0.8%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
- 5.5CVE-2026-69504EPSS 0.4%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 8.0CVE-2026-69503EPSS 0.8%
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
- 7.0CVE-2026-69501EPSS 0.3%
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-69500EPSS 0.3%
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2026-69499EPSS 0.8%
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
- 7.0CVE-2026-69498EPSS 0.3%
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- 9.8CVE-2026-69496EPSS 1.0%
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-69495EPSS 0.8%
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2026-69494EPSS 0.8%
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
- 9.8CVE-2026-69493EPSS 1.0%
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
- 7.0CVE-2026-69492EPSS 0.3%
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
- 9.8CVE-2026-69491EPSS 1.0%
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
- 6.8CVE-2026-69490EPSS 0.4%
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- 7.8CVE-2026-69489EPSS 0.3%
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- 7.0CVE-2026-69488EPSS 0.3%
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2026-69485EPSS 0.9%
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
- 4.7CVE-2026-69483EPSS 0.3%
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.