CVE NVD 4h ago

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor: Microsoft
Product: Windows 11 version 23H2, Windows 11 Version 23H2, Windows 11 Version 24H2
CVSS v3.1: 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-122
Exposure class: Operating system
NVD status: Awaiting Analysis

Why it ranks 36 (Notable)

CVSS v3.1 7.8 high
Product class: operating system
Widely deployed vendor product (Microsoft)
Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.

Related coverage

Other items that share a CVE or were clustered with this one.

36

CVE NVD 4h ago

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95974 Microsoft
36

CVE NVD 4h ago

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95965 Microsoft
36

CVE NVD 4h ago

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95951 Microsoft
36

CVE NVD 4h ago

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95948 Microsoft
42

CVE NVD 4h ago

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95938 Microsoft
42

CVE NVD 4h ago

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95935 Microsoft
42

CVE NVD 4h ago

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95933 Microsoft
42

CVE NVD 4h ago

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95923 Microsoft
42

CVE NVD 4h ago

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95922 Microsoft
36

CVE NVD 4h ago

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95920 Microsoft
42

CVE NVD 4h ago

Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95902 Microsoft
42

CVE NVD 4h ago

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95898 Microsoft
42

CVE NVD 4h ago

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95894 Microsoft
36

CVE NVD 4h ago

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95888 Microsoft
36

CVE NVD 4h ago

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95881 Microsoft
36

CVE NVD 4h ago

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95877 Microsoft
42

CVE NVD 4h ago

Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95874 Microsoft
42

CVE NVD 4h ago

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95872 Microsoft
36

CVE NVD 4h ago

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95871 Microsoft
36

CVE NVD 4h ago

Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-94531 Microsoft

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.

Links

Related coverage

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

Keyboard