CVE-2026-23670Disclosure(microsoft / windows_10_1607)

LOWCVSS 5.7 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

microsoft CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23670

Weakness type (CWE)

CWE-822

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_10_1607
windows_10_1809
windows_10_21h2
windows_10_22h2

Threat summary

Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 5 signals
Disclosure: 3 classified signals
Peaked 2d ago at 2 mentions (2026-04-17); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2016windows_server_2019

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

360.0%

Patch

240.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-17	2	Disclosure2
2026-08-13	2	Disclosure1Patch1
2026-08-18	1	Patch1

Full discourse5 posts

Sajber Sfera@sajbersfera56d
Disclosure
Otkriven propust u Windows 11 sistemu! 🚨 Softverski napad preko nezaštićenih RAM čipova omogućava zaobilaženje VBS/HVCI zaštite i gašenje antivirusa bez fizičkog pristupa računaru. Saznajte kako da zaštitite svoj PC (CVE-2026-23670) 👇 🔗 [LINK DO ČLANKA U KOMENTARU] #Windows11 #CyberSecurity #RAM #Corsair #SajberSfera #TechNews
Post summary
A Windows 11 vulnerability (CVE-2026-23670) that allows bypassing VBS/HVCI and disabling antivirus through unprotected RAM chips has been announced, with a link to learn protective measures.
1000046
100 followersView on X
Softonic@softonic51d
Patch
🚨 Windows 11 users, take note! 🖥️ The April 2026 security patch includes a crucial fix for a RAM flaw (CVE-2026-23670) that could let attackers bypass Virtualization-Based Security. Ensure your systems are updated, especially if running enterprise... https://en.softonic.com/articles/windows-11-gets-april-2026-patches-a-ram-flaw-can-bypass-vbs?utm_campaign=mrf-twitter-softonic&utm_source=twitter&utm_medium=social&mrfcid=202608186a816e019651b449c31ec993
Post summary
The tweet announces that Windows 11 users should apply the April 2026 patch to fix the RAM flaw (CVE‑2026‑23670) that enables bypassing Virtualization‑Based Security.
00000106
25.1K followersView on X
Windows Forum@windowsforum56d
Patch
🛡️ Microsoft’s April fix needs Secure Boot—and CVE-2026-23670 still requires local admin or malware with admin rights. Serious RAM tampering, yes; magical remote takeover, no. https://windowsforum.com/windows-news.4/cve-2026-23670-windows-april-fix-requires-secure-boot.442818/?utm_source=x&utm_medium=social&utm_campaign=news_node4 #Windows11 #SecureBoot #VirtualizationBasedSecurity #Cve202623670 https://t.co/Vw7lxjwzYF
Post summary
The tweet indicates that Microsoft’s April update for CVE‑2026‑23670 requires Secure Boot and that patching is the primary mitigation, rather than providing vulnerability exploitation details.
0000044
1.3K followersView on X
Infoflowcloud@infoflowcloud174d
Disclosure
🚨*CVE* CVE-2026-23670 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. https://www.cve.org/CVERecord?id=CVE-2026-23670 ----- Traducción: CVE-2026-23670 Desreferenciación d… http://infoflow.cloud`
Post summary
A new CVE (CVE-2026-23670) affecting Windows VBS Enclave has been disclosed, describing an untrusted pointer dereference that allows an authorized attacker to bypass a security feature locally. No PoC, exploit, mitigation, or active exploitation details are provided.
0000043
71 followersView on X
CVE@CVEnew174d
Disclosure
CVE-2026-23670 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. https://www.cve.org/CVERecord?id=CVE-2026-23670
Post summary
The post announces CVE‑2026‑23670, describing an untrusted pointer dereference in Windows VBS Enclave that can bypass a security feature for authorized attackers, with no additional context on PoCs, exploits, patches, or active use.
000001.1K
57.2K followersView on X

CPE platform detail23 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

23 of 23 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_10_1607	-	-	x64
OS	microsoft	windows_10_1607	-	-	x86
OS	microsoft	windows_10_1809	-	-	x64
OS	microsoft	windows_10_1809	-	-	x86
OS	microsoft	windows_10_21h2	-	-	arm64
OS	microsoft	windows_10_21h2	-	-	x64
OS	microsoft	windows_10_21h2	-	-	x86
OS	microsoft	windows_10_22h2	-	-	arm64
OS	microsoft	windows_10_22h2	-	-	x64
OS	microsoft	windows_10_22h2	-	-	x86
OS	microsoft	windows_11_23h2	-	-	arm64
OS	microsoft	windows_11_23h2	-	-	x64
OS	microsoft	windows_11_24h2	-	-	arm64
OS	microsoft	windows_11_24h2	-	-	x64
OS	microsoft	windows_11_25h2	-	-	arm64
OS	microsoft	windows_11_25h2	-	-	x64
OS	microsoft	windows_11_26h1	-	-	arm64
OS	microsoft	windows_11_26h1	-	-	x64
OS	microsoft	windows_server_2016	-	-	-
OS	microsoft	windows_server_2019	-	-	-
OS	microsoft	windows_server_2022	-	-	-
OS	microsoft	windows_server_2022_23h2	-	-	-
OS	microsoft	windows_server_2025	-	-	-

Explore more

Back to dashboard microsoft CVEs windows_10_1607 vulnerabilities

What researchers are saying

CVE-2026-23670

Sajber Sfera[verified]@sajbersferaDisclosure

A Windows 11 vulnerability (CVE-2026-23670) that allows bypassing VBS/HVCI and disabling antivirus through unprotected RAM chips has been announced, with a link to learn protective measures.

Windows Forum[verified]@windowsforumPatch

The tweet indicates that Microsoft’s April update for CVE‑2026‑23670 requires Secure Boot and that patching is the primary mitigation, rather than providing vulnerability exploitation details.

Softonic@softonicPatch

The tweet announces that Windows 11 users should apply the April 2026 patch to fix the RAM flaw (CVE‑2026‑23670) that enables bypassing Virtualization‑Based Security.

Infoflowcloud@infoflowcloudDisclosure

A new CVE (CVE-2026-23670) affecting Windows VBS Enclave has been disclosed, describing an untrusted pointer dereference that allows an authorized attacker to bypass a security feature locally. No PoC, exploit, mitigation, or active exploitation details are provided.

CVE@CVEnewDisclosure

The post announces CVE‑2026‑23670, describing an untrusted pointer dereference in Windows VBS Enclave that can bypass a security feature for authorized attackers, with no additional context on PoCs, exploits, patches, or active use.