Microsoft Windows 11 23H2 vulnerabilities, page 5

2,833 vulnerabilities

Known vulnerabilities in Microsoft Windows 11 23H2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5MediumCVE-2026-96855microsoft · windows_10_1809 +20 moreWindows Modern Device Management (MDM) Tampering VulnerabilityImproper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.EPSS0.28%5.5MediumCVE-2026-96854microsoft · windows_10_1607 +27 moreWindows Device Association Service Information Disclosure VulnerabilityAccess of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.EPSS0.30%4.7MediumCVE-2026-96853microsoft · windows_10_1607 +28 moreWindows Win32 Kernel Subsystem Information Disclosure VulnerabilityTime-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.EPSS0.18%7HighCVE-2026-96852microsoft · windows_10_1607 +28 moreWindows TCP/IP Elevation of Privilege VulnerabilityUse after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.EPSS0.25%5.5MediumCVE-2026-96851microsoft · windows_10_1607 +28 moreWindows Management Instrumentation Information Disclosure VulnerabilityBuffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.EPSS0.39%5.5MediumCVE-2026-96850microsoft · windows_10_1809 +20 moreWindows Modern Device Management (MDM) Information Disclosure VulnerabilityUse of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.EPSS0.39%5.5MediumCVE-2026-96848microsoft · windows_10_1809 +12 moreWindows Win32 Kernel Subsystem Information Disclosure VulnerabilityBuffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.EPSS0.39%7.8HighCVE-2026-96847microsoft · windows_10_1607 +28 moreWebDAV Elevation of Privilege VulnerabilityUntrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.EPSS0.31%5.5MediumCVE-2026-96846microsoft · windows_10_1607 +28 moreWebDAV Information Disclosure VulnerabilityOut-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.EPSS0.30%8HighCVE-2026-96844microsoft · windows_10_1607 +28 moreMicrosoft Bluetooth Driver Elevation of Privilege VulnerabilityInteger underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.EPSS0.47%7.8HighCVE-2026-96843microsoft · windows_10_1607 +28 moreWebDAV Elevation of Privilege VulnerabilityHeap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.EPSS0.31%7.5HighCVE-2026-96325microsoft · windows_10_1607 +28 moreWindows SMB Server Denial of Service VulnerabilityMissing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.EPSS0.82%7.8HighCVE-2026-96324microsoft · windows_10_1607 +28 moreMicrosoft Windows Search Component Elevation of Privilege VulnerabilityUse after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.EPSS0.31%7HighCVE-2026-96323microsoft · windows_10_21h2 +16 moreWindows Update Elevation of Privilege VulnerabilityUse after free in Windows Update allows an authorized attacker to elevate privileges locally.EPSS0.25%7HighCVE-2026-96322microsoft · windows_10_1607 +28 moreWindows Remote Desktop Protocol Elevation of Privilege VulnerabilityUse after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.EPSS0.20%5.5MediumCVE-2026-96321microsoft · windows_10_21h2 +16 moreRemote Desktop Display Driver Information Disclosure VulnerabilityOut-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.EPSS0.39%7HighCVE-2026-96319microsoft · windows_10_21h2 +16 moreWindows USB Print Driver Elevation of Privilege VulnerabilityUse after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.EPSS0.25%7.8HighCVE-2026-96318microsoft · windows_10_1607 +28 moreWindows Resume Elevation of Privilege VulnerabilityHeap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.EPSS0.31%7.8HighCVE-2026-96317microsoft · windows_10_1809 +20 moreWindows Kernel Elevation of Privilege VulnerabilityUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.EPSS0.25%5.5MediumCVE-2026-96316microsoft · windows_10_1607 +28 moreWindows Routing and Remote Access Service (RRAS) Tampering VulnerabilityImproper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.EPSS0.28%