cbcvebase.

Microsoft Windows 11 23H2 vulnerabilities

2,851 known vulnerabilities affecting microsoft/windows_11_23h2.

Total CVEs
2,851
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL79HIGH2055MEDIUM710LOW7

Vulnerabilities

Page 37 of 143
CVE-2026-96856P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-96856 [HIGH] CWE-122 CVE-2026-96856: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96217P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-96217 [HIGH] CWE-122 CVE-2026-96217: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33841P3HIGHCVSS 7.8fixed in 10.0.22631.70792026-05-12
CVE-2026-33841 [HIGH] CWE-122 CVE-2026-33841: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83931P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-83931 [HIGH] CWE-122 CVE-2026-83931: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
nvd
CVE-2026-26180P3HIGHCVSS 7.8fixed in 10.0.22631.69362026-04-14
CVE-2026-26180 [HIGH] CWE-122 CVE-2026-26180: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-58726P3HIGHCVSS 7.5≤ 10.0.22631.60602025-10-14
CVE-2025-58726 [HIGH] CWE-284 CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges ov Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-26158P3HIGHCVSS 7.8fixed in 10.0.22631.34472024-04-09
CVE-2024-26158 [HIGH] CWE-59 CVE-2024-26158: Microsoft Install Service Elevation of Privilege Vulnerability Microsoft Install Service Elevation of Privilege Vulnerability
nvd
CVE-2026-87711P3HIGHCVSS 7.8fixed in 10.0.22631.76522026-10-13
CVE-2026-87711 [HIGH] CWE-121 CVE-2026-87711: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38244P3HIGHCVSS 7.8fixed in 10.0.22621.4169fixed in 10.0.22631.41692024-09-10
CVE-2024-38244 [HIGH] CWE-20 CVE-2024-38244: Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-26634P3HIGHCVSS 7.5fixed in 10.0.22631.48902025-03-11
CVE-2025-26634 [HIGH] CWE-122 CVE-2025-26634: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69987P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-69987 [HIGH] CWE-416 CVE-2026-69987: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69986P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-69986 [HIGH] CWE-416 CVE-2026-69986: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69991P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-69991 [HIGH] CWE-416 CVE-2026-69991: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69994P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-69994 [HIGH] CWE-416 CVE-2026-69994: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69984P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-69984 [HIGH] CWE-416 CVE-2026-69984: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69995P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-69995 [HIGH] CWE-416 CVE-2026-69995: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69998P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-69998 [HIGH] CWE-416 CVE-2026-69998: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70004P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-70004 [HIGH] CWE-416 CVE-2026-70004: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69996P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-69996 [HIGH] CWE-416 CVE-2026-69996: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70012P3HIGHCVSS 7.5fixed in 10.0.22631.76522026-10-13
CVE-2026-70012 [HIGH] CWE-416 CVE-2026-70012: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
← Previous37 / 143Next →
Microsoft Windows 11 23H2 vulnerabilities | cvebase