CVE-2026-69740 – Microsoft Windows 11 version 23H2
“Twenty-two open doors and one is already being used. Every unpatched Windows 11 endpoint is a foothold waiting to be taken.”
This Windows 11 version 23H2 update fixes 22 High severity vulnerabilities. Most of them allow remote code execution, elevation of privilege, or both. Use-after-free memory flaws make up the largest group, and the rest include heap and stack overflows, a double free, an out-of-bounds read, null pointer dereferences, link-following and file-path control flaws, and a missing authentication check. Attackers are actively exploiting CVE-2026-81963, an elevation of privilege flaw that lets an attacker gain higher-level control of the system.
CVE-2026-69740 and CVE-2026-72940 have a CVSS score of 8.8, High severity. CVE-2026-72936 has a CVSS score of 8.1, High severity. CVE-2026-69322 has a CVSS score of 8.0, High severity. CVE-2026-69392, CVE-2026-69447, CVE-2026-69528, CVE-2026-70569, CVE-2026-81963, and CVE-2026-83990 have a CVSS score of 7.8, High severity. CVE-2026-69587, CVE-2026-69599, and CVE-2026-72949 have a CVSS score of 7.5, High severity. CVE-2026-69536, CVE-2026-69597, and CVE-2026-69775 have a CVSS score of 7.1, High severity. CVE-2026-68825, CVE-2026-69300, CVE-2026-69379, CVE-2026-69383, CVE-2026-69606, and CVE-2026-69814 have a CVSS score of 7.0, High severity.
Key Details
- Affected Product
- Microsoft Windows 11 23h2
- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-416