Microsoft Windows 11 23H2 vulnerabilities
2,851 known vulnerabilities affecting microsoft/windows_11_23h2.
Total CVEs
2,851
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL79HIGH2055MEDIUM710LOW7
Vulnerabilities
Page 17 of 143
CVE-2026-69603P3HIGHCVSS 8.8fixed in 10.0.22631.75822026-09-08
CVE-2026-69603 [HIGH] CWE-122 CVE-2026-69603: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
nvd
CVE-2026-100218P3HIGHCVSS 8.1fixed in 10.0.22631.76522026-10-13
CVE-2026-100218 [HIGH] CWE-416 CVE-2026-100218: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78449P3HIGHCVSS 8.1fixed in 10.0.22631.75822026-09-08
CVE-2026-78449 [HIGH] CWE-416 CVE-2026-78449: Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to ex
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72981P3HIGHCVSS 8.1fixed in 10.0.22631.75822026-09-08
CVE-2026-72981 [HIGH] CWE-416 CVE-2026-72981: Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69786P3HIGHCVSS 8.1fixed in 10.0.22631.75822026-09-08
CVE-2026-69786 [HIGH] CWE-122 CVE-2026-69786: Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code o
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85371P3HIGHCVSS 8.1fixed in 10.0.22631.76522026-10-13
CVE-2026-85371 [HIGH] CWE-416 CVE-2026-85371: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-54110P3HIGHCVSS 8.8fixed in 10.0.22631.59092025-09-09
CVE-2025-54110 [HIGH] CWE-190 CVE-2025-54110: Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42980P3HIGHCVSS 7.8fixed in 10.0.22631.72192026-06-09
CVE-2026-42980 [HIGH] CWE-122 CVE-2026-42980: Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elev
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69514P3HIGHCVSS 7.5fixed in 10.0.22631.75822026-09-08
CVE-2026-69514 [HIGH] CWE-122 CVE-2026-69514: Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execu
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69688P3HIGHCVSS 7.5fixed in 10.0.22631.75822026-09-08
CVE-2026-69688 [HIGH] CWE-122 CVE-2026-69688: Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-33829P3MEDIUMCVSS 4.3PoCfixed in 10.0.22631.69362026-04-14
CVE-2026-33829 [MEDIUM] CWE-200 CVE-2026-33829: Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauth
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-59295P3HIGHCVSS 8.8≤ 10.0.22631.60602025-10-14
CVE-2025-59295 [HIGH] CWE-122 CVE-2025-59295: Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-26205P3HIGHCVSS 8.8fixed in 10.0.22631.34472024-04-09
CVE-2024-26205 [HIGH] CWE-122 CVE-2024-26205: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-26200P3HIGHCVSS 8.8fixed in 10.0.22631.34472024-04-09
CVE-2024-26200 [HIGH] CWE-122 CVE-2024-26200: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-26179P3HIGHCVSS 8.8fixed in 10.0.22631.34472024-04-09
CVE-2024-26179 [HIGH] CWE-122 CVE-2024-26179: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-30009P3HIGHCVSS 8.8fixed in 10.0.22631.35932024-05-14
CVE-2024-30009 [HIGH] CWE-197 CVE-2024-30009: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38115P3HIGHCVSS 8.8fixed in 10.0.22631.40372024-08-13
CVE-2024-38115 [HIGH] CWE-122 CVE-2024-38115: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2024-38130P3HIGHCVSS 8.8fixed in 10.0.22631.40372024-08-13
CVE-2024-38130 [HIGH] CWE-122 CVE-2024-38130: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-30013P3HIGHCVSS 8.8fixed in 10.0.22631.38802024-07-09
CVE-2024-30013 [HIGH] CWE-415 CVE-2024-30013: Windows MultiPoint Services Remote Code Execution Vulnerability
Windows MultiPoint Services Remote Code Execution Vulnerability
nvd
CVE-2024-38114P3HIGHCVSS 8.8fixed in 10.0.22631.40372024-08-13
CVE-2024-38114 [HIGH] CWE-122 CVE-2024-38114: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd