microsoft / windows_11_23h2
761 known vulnerabilities in microsoft windows_11_23h2.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-69616 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attac… | |
| CVE-2026-69627 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authori… | |
| CVE-2026-69808 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose i… | |
| CVE-2026-71341 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Partition Management Driver allows an authorized a… | |
| CVE-2026-72980 | Low | 0.4% | 4.4 | Uncontrolled search path element in Windows Hello allows an authorized attacker … | |
| CVE-2026-42915 | Low | 0.4% | 5.5 | Incorrect calculation of buffer size in Windows VMSwitch allows an authorized at… | |
| CVE-2026-45606 | Low | 0.4% | 5.5 | Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authoriz… | |
| CVE-2026-68831 | Low | 0.4% | 5.5 | Files or directories accessible to external parties in Windows Defender Firewall… | |
| CVE-2026-61368 | Low | 0.4% | 5.0 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to d… | |
| CVE-2026-59136 | Low | 0.4% | 5.5 | Use of uninitialized resource in Microsoft COM for Windows allows an authorized … | |
| CVE-2026-69832 | Low | 0.4% | 5.6 | Exposure of sensitive system information to an unauthorized control sphere in Wi… | |
| CVE-2026-45634 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to discl… | |
| CVE-2026-45604 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an a… | |
| CVE-2026-83991 | Low | 0.3% | 5.5 | Missing authentication for critical function in Windows Cloud Files Mini Filter … | |
| CVE-2026-69294 | Low | 0.3% | 5.5 | Generation of error message containing sensitive information in Microsoft COM fo… | |
| CVE-2026-45608 | Low | 0.3% | 6.8 | Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to dis… | |
| CVE-2026-59130 | Low | 0.3% | 5.6 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose infor… | |
| CVE-2026-62769 | Low | 0.3% | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate… | |
| CVE-2026-62881 | Low | 0.3% | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate… | |
| CVE-2026-71339 | Low | 0.3% | 6.7 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to… | |
| CVE-2026-59135 | Low | 0.3% | 5.5 | Weak authentication in Microsoft Windows Search Component allows an authorized a… | |
| CVE-2026-45642 | Low | 0.3% | 3.9 | Improper input validation in Microsoft Azure Attestation service and Device Heal… | |
| CVE-2026-70304 | Low | 0.3% | 6.7 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to eleva… | |
| CVE-2026-70330 | Low | 0.3% | 6.7 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to eleva… | |
| CVE-2026-62786 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose i… | |
| CVE-2026-62793 | Low | 0.3% | 5.5 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose infor… | |
| CVE-2026-62796 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose inf… | |
| CVE-2026-62798 | Low | 0.3% | 5.5 | Untrusted pointer dereference in Windows Win32K allows an authorized attacker to… | |
| CVE-2026-65662 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows GDI allows an authorized attacker to disclose info… | |
| CVE-2026-69554 | Low | 0.3% | 5.5 | Missing authentication for critical function in Microsoft Windows Search Compone… | |
| CVE-2026-68833 | Low | 0.3% | 6.8 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex… | |
| CVE-2026-71329 | Low | 0.3% | 6.8 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex… | |
| CVE-2026-72999 | Low | 0.3% | 6.8 | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to … | |
| CVE-2026-77892 | Low | 0.3% | 6.8 | No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to… | |
| CVE-2026-83501 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows… | |
| CVE-2026-65784 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose inf… | |
| CVE-2026-69288 | Low | 0.3% | 5.5 | Use of uninitialized resource in Windows GDI+ allows an authorized attacker to d… | |
| CVE-2026-62887 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose inf… | |
| CVE-2026-68851 | Low | 0.3% | 5.5 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose infor… | |
| CVE-2026-69316 | Low | 0.3% | 4.7 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disc… | |
| CVE-2026-69853 | Low | 0.3% | 4.7 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to… | |
| CVE-2026-69895 | Low | 0.3% | 4.7 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to dis… | |
| CVE-2026-77491 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose in… | |
| CVE-2026-65777 | Low | 0.3% | 5.3 | Inadequate encryption strength in Windows Active Directory allows an authorized … | |
| CVE-2026-59131 | Low | 0.3% | 5.6 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose infor… | |
| CVE-2026-61936 | Low | 0.3% | 5.5 | Missing authorization in Windows Defender Firewall Service allows an authorized … | |
| CVE-2026-72966 | Low | 0.3% | 5.5 | Missing authorization in Windows Remote Access Connection Manager allows an auth… | |
| CVE-2026-68830 | Low | 0.3% | 5.5 | Improper link resolution before file access ('link following') in Windows Univer… | |
| CVE-2026-34346 | Low | 0.3% | 5.5 | Cleartext transmission of sensitive information in Windows Ancillary Function Dr… | |
| CVE-2026-69425 | Low | 0.3% | 4.7 | Improper link resolution before file access ('link following') in Windows NTFS a… |