Skip to content
Sign in
CVE-2026-628159.8CriticalCWE-416

CVE-2026-62815: Microsoft Windows 11 version 23H2 vulnerability

Microsoft · Windows 11 version 23H2

Vendor fix available · Affected: Microsoft Windows 11 version 23H2 · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.09 (9 Nov)

  1. In CISA KEV: not seen
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not establishedNothing in the sources we check
1.0%probability of exploitation in the next 30 days
62nd percentile
050100

Higher than 62% of scored CVEs

9.8CriticalCVSS 3.1
LowCrit.

DescriptionNVD

Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

Coverage2 articles · 2 outlets

One row per outlet, in order of first report. First in our coverage: SANS ISC, 11 Aug.

Full timeline
Quiet for 13 weekslast report 11 Aug2 articles2 outlets
11 Aug · SANS ISC first28 Sep14 OctNow
  • Tue 11 Aug, 20:11 UTC. SANS ISC, first report. Microsoft Patch Tuesday August 2026, (Tue, Aug 11th).
  • Tue 11 Aug, 22:32 UTC. Dark Reading, its first report on the story. Microsoft's Patch Tuesday Deluge Continues With August Updates.
All coveragerunning total2SANS ISC1Dark Reading112 Aug12 Sep13 OctNow
  • First report
  • Article
  • Running total
Show as table
2 articles about CVE-2026-62815 from 2 outlets
Published (UTC)OutletHeadline
11 Aug 20:11SANS ISCMicrosoft Patch Tuesday August 2026, (Tue, Aug 11th)
11 Aug 22:32Dark ReadingMicrosoft's Patch Tuesday Deluge Continues With August Updates
  1. Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
    SANS ISC · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References

Updated AboutDevelopersSign in