Microsoft: >> Windows 11 23h2 >> 10.0.22631.2428 Security Vulnerabilities
Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.
CVSS Score
5.5
EPSS Score
0.009
Published
2026-10-13
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.005
Published
2026-10-13
Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-10-13
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
EPSS Score
0.01
Published
2026-10-13
Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-10-13
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.004
Published
2026-10-13
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
EPSS Score
0.009
Published
2026-10-13
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.
CVSS Score
6.6
EPSS Score
0.005
Published
2026-10-13
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
CVSS Score
9.8
EPSS Score
0.009
Published
2026-10-13
Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.
CVSS Score
7.1
EPSS Score
0.007
Published
2026-10-13