CVE-2026-69322: CWE-415: Double Free in Microsoft Windows 11 version 23H2

CVE-2026-69322 is a double free vulnerability (CWE-415) in the Windows Search Component of Microsoft Windows 11 version 23H2. An authorized attacker can exploit this flaw remotely over a network to elevate privileges, potentially gaining higher system rights. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high severity with network attack vector, low attack complexity, and requiring privileges and user interaction. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an authorized attacker to elevate privileges on a vulnerable Windows 11 23H2 system remotely over a network. This can lead to full system compromise with confidentiality, integrity, and availability impacts rated high. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 11 version 23H2 as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69322. No additional mitigations are specified by the vendor.