Windows 11
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Security update reported by BleepingComputerMicrosoft fixes Smart App Control broken by October Windows update
- Vulnerability reported by Cyber Security NewsPublic proof-of-concept released for patched Windows WinSock privilege escalation flaw CVE-2023-21768
- Security update reported by BleepingComputerMicrosoft fixes Windows 11 Remote Desktop failures affecting non-admin users with Administrator protection
Recent news
Microsoft fixes Smart App Control broken by October Windows update
Microsoft has resolved a known issue that stopped some Windows 11 users activating Smart App Control after installing the October 2026 security update KB5127648. The article does not give further technical detail on the cause or the fix.
Public proof-of-concept released for patched Windows WinSock privilege escalation flaw CVE-2023-21768
A public proof-of-concept exploit for CVE-2023-21768 targets the afd.sys Windows kernel driver and lets a local user with low privileges gain SYSTEM rights, with the full chain reported working on Windows 11 22H2. Microsoft patched the flaw in January 2023, and IBM published the researchers' analysis on 21 March 2023. The exploit does not provide a direct remote route in.
Microsoft fixes Windows 11 Remote Desktop failures affecting non-admin users with Administrator protection
Microsoft has resolved a Windows 11 issue where non-admin users could not connect over Remote Desktop to hosts with Administrator protection enabled, failing with error 0xC000000D and the message 'The token that was passed to the function is invalid.' The bug appeared after the 22 September non-security preview update KB5124010 or later, and affects Windows 11 24H2, 25H2, 26H1 and 26H2, with Windows Server not listed. The fix is in updates released on or after 28 October, including preview update KB5127936 for 25H2 and 26H2.