Microsoft Windows 11 23H2 vulnerabilities
1,546 known vulnerabilities affecting microsoft/windows_11_23h2.
Total CVEs
1,546
CISA KEV
53
actively exploited
Public exploits
37
Exploited in wild
63
Severity breakdown
CRITICAL24HIGH1099MEDIUM416LOW7
Vulnerabilities
Page 1 of 78
CVE-2025-33073P1HIGHCVSS 8.8KEVPoCRansomwarefixed in 10.0.22631.54722025-06-10
CVE-2025-33073 [HIGH] CWE-284 CVE-2025-33073: Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a ne
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-21412P1HIGHCVSS 8.1KEVPoCRansomwarefixed in 10.0.22631.31552024-02-13
CVE-2024-21412 [HIGH] CWE-693 CVE-2024-21412: Internet Shortcut Files Security Feature Bypass Vulnerability
Internet Shortcut Files Security Feature Bypass Vulnerability
nvd
CVE-2025-33053P1HIGHCVSS 8.8KEVPoCfixed in 10.0.22631.54722025-06-10
CVE-2025-33053 [HIGH] CWE-73 CVE-2025-33053: External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-21338P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22631.31552024-02-13
CVE-2024-21338 [HIGH] CWE-822 CVE-2024-21338: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-30088P1HIGHCVSS 7.0KEVPoCRansomwarefixed in 10.0.22631.37372024-06-11
CVE-2024-30088 [HIGH] CWE-367 CVE-2024-30088: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-24054P1MEDIUMCVSS 5.4KEVPoCfixed in 10.0.22631.50392025-03-11
CVE-2025-24054 [MEDIUM] CWE-73 CVE-2025-24054: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-49039P1HIGHCVSS 8.8KEVPoCRansomwarefixed in 10.0.22631.44602024-11-12
CVE-2024-49039 [HIGH] CWE-287 CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
nvd
CVE-2025-30397P1HIGHCVSS 7.5KEVPoCfixed in 10.0.22631.53352025-05-13
CVE-2025-30397 [HIGH] CWE-843 CVE-2025-30397: Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows a
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-29824P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22631.51892025-04-08
CVE-2025-29824 [HIGH] CWE-416 CVE-2025-29824: Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26633P1HIGHCVSS 7.0KEVPoCRansomwarefixed in 10.0.22631.50392025-03-11
CVE-2025-26633 [HIGH] CWE-707 CVE-2025-26633: Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2024-49138P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22631.46022024-12-12
CVE-2024-49138 [HIGH] CWE-122 CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-35250P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22631.37372024-06-11
CVE-2024-35250 [HIGH] CWE-822 CVE-2024-35250: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38193P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22631.40372024-08-13
CVE-2024-38193 [HIGH] CWE-416 CVE-2024-38193: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2024-30051P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22631.35932024-05-14
CVE-2024-30051 [HIGH] CWE-122 CVE-2024-30051: Windows DWM Core Library Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2025-62215P1HIGHCVSS 7.0KEVPoCfixed in 10.0.22631.61992025-11-11
CVE-2025-62215 [HIGH] CWE-362 CVE-2025-62215: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-21333P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22631.47512025-01-14
CVE-2025-21333 [HIGH] CWE-122 CVE-2025-21333: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
nvd
CVE-2026-32202P2MEDIUMCVSS 4.3KEVPoCfixed in 10.0.22631.69362026-04-14
CVE-2026-32202 [MEDIUM] CWE-693 CVE-2026-32202: Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing ov
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-36424P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22631.27152023-11-14
CVE-2023-36424 [HIGH] CWE-125 CVE-2023-36424: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38080P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22631.38802024-07-09
CVE-2024-38080 [HIGH] CWE-190 CVE-2024-38080: Windows Hyper-V Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2025-24990P1HIGHCVSS 7.8KEVPoC≤ 10.0.22631.60602025-10-14
CVE-2025-24990 [HIGH] CWE-822 CVE-2025-24990: Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update.
Fax modem hardware dependent on this specific driver will no longer work on Window
nvd
1 / 78Next →