Microsoft Windows 11 23H2 vulnerabilities
3,264 known vulnerabilities affecting microsoft/windows_11_23h2.
Total CVEs
3,264
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL92HIGH2353MEDIUM812LOW7
Vulnerabilities
Page 140 of 164
CVE-2024-49073P4MEDIUMCVSS 6.8fixed in 10.0.22631.46022024-12-12
CVE-2024-49073 [MEDIUM] CWE-20 CVE-2024-49073: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49077P4MEDIUMCVSS 6.8fixed in 10.0.22631.46022024-12-12
CVE-2024-49077 [MEDIUM] CWE-125 CVE-2024-49077: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49078P4MEDIUMCVSS 6.8fixed in 10.0.22631.46022024-12-12
CVE-2024-49078 [MEDIUM] CWE-125 CVE-2024-49078: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49083P4MEDIUMCVSS 6.8fixed in 10.0.22631.46022024-12-12
CVE-2024-49083 [MEDIUM] CWE-125 CVE-2024-49083: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49092P4MEDIUMCVSS 6.8fixed in 10.0.22631.46022024-12-12
CVE-2024-49092 [MEDIUM] CWE-125 CVE-2024-49092: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43634P4MEDIUMCVSS 6.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43634 [MEDIUM] CWE-125 CVE-2024-43634: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43449P4MEDIUMCVSS 6.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43449 [MEDIUM] CWE-125 CVE-2024-43449: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43637P4MEDIUMCVSS 6.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43637 [MEDIUM] CWE-125 CVE-2024-43637: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43638P4MEDIUMCVSS 6.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43638 [MEDIUM] CWE-125 CVE-2024-43638: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43643P4MEDIUMCVSS 6.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43643 [MEDIUM] CWE-125 CVE-2024-43643: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38223P4MEDIUMCVSS 6.8fixed in 10.0.22631.40372024-08-13
CVE-2024-38223 [MEDIUM] CWE-284 CVE-2024-38223: Windows Initial Machine Configuration Elevation of Privilege Vulnerability
Windows Initial Machine Configuration Elevation of Privilege Vulnerability
nvd
CVE-2025-24987P4MEDIUMCVSS 6.8fixed in 10.0.22631.50392025-03-11
CVE-2025-24987 [MEDIUM] CWE-125 CVE-2025-24987: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2025-24988P4MEDIUMCVSS 6.8fixed in 10.0.22631.50392025-03-11
CVE-2025-24988 [MEDIUM] CWE-125 CVE-2025-24988: Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges w
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2025-49751P4MEDIUMCVSS 6.8fixed in 10.0.22631.57682025-08-12
CVE-2025-49751 [MEDIUM] CWE-820 CVE-2025-49751: Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adj
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2025-47999P4MEDIUMCVSS 6.8fixed in 10.0.22631.56242025-07-08
CVE-2025-47999 [MEDIUM] CWE-820 CVE-2025-47999: Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adj
Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.
nvd
CVE-2025-47980P4MEDIUMCVSS 6.2fixed in 10.0.22631.56242025-07-08
CVE-2025-47980 [MEDIUM] CWE-200 CVE-2025-47980: Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an un
Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-20935P4MEDIUMCVSS 6.2fixed in 10.0.22631.64912026-01-13
CVE-2026-20935 [MEDIUM] CWE-822 CVE-2026-20935: Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unaut
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
nvd
CVE-2025-54101P4MEDIUMCVSS 4.8fixed in 10.0.22631.59092025-09-09
CVE-2025-54101 [MEDIUM] CWE-416 CVE-2025-54101: Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.
Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.
nvd
CVE-2026-70232P4MEDIUMCVSS 5.5fixed in 10.0.22631.76522026-10-13
CVE-2026-70232 [MEDIUM] CWE-497 CVE-2026-70232: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83713P4MEDIUMCVSS 5.5fixed in 10.0.22631.76522026-10-13
CVE-2026-83713 [MEDIUM] CWE-497 CVE-2026-83713: Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized a
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
nvd