Microsoft Windows 11 23H2 vulnerabilities
1,546 known vulnerabilities affecting microsoft/windows_11_23h2.
Total CVEs
1,546
CISA KEV
53
actively exploited
Public exploits
37
Exploited in wild
63
Severity breakdown
CRITICAL24HIGH1099MEDIUM416LOW7
Vulnerabilities
Page 68 of 78
CVE-2025-21227P4MEDIUMCVSS 6.6fixed in 10.0.22631.47512025-01-14
CVE-2025-21227 [MEDIUM] CWE-125 CVE-2025-21227: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21229P4MEDIUMCVSS 6.6fixed in 10.0.22631.47512025-01-14
CVE-2025-21229 [MEDIUM] CWE-125 CVE-2025-21229: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21310P4MEDIUMCVSS 6.6fixed in 10.0.22631.47512025-01-14
CVE-2025-21310 [MEDIUM] CWE-125 CVE-2025-21310: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21263P4MEDIUMCVSS 6.6fixed in 10.0.22631.47512025-01-14
CVE-2025-21263 [MEDIUM] CWE-125 CVE-2025-21263: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21327P4MEDIUMCVSS 6.6fixed in 10.0.22631.47512025-01-14
CVE-2025-21327 [MEDIUM] CWE-125 CVE-2025-21327: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21265P4MEDIUMCVSS 6.6fixed in 10.0.22631.47512025-01-14
CVE-2025-21265 [MEDIUM] CWE-125 CVE-2025-21265: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21261P4MEDIUMCVSS 6.6fixed in 10.0.22631.47512025-01-14
CVE-2025-21261 [MEDIUM] CWE-125 CVE-2025-21261: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21341P4MEDIUMCVSS 6.6fixed in 10.0.22631.47512025-01-14
CVE-2025-21341 [MEDIUM] CWE-125 CVE-2025-21341: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-62463P4MEDIUMCVSS 6.5fixed in 10.0.22631.63452025-12-09
CVE-2025-62463 [MEDIUM] CWE-476 CVE-2025-62463: Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.
nvd
CVE-2025-62465P4MEDIUMCVSS 6.5fixed in 10.0.22631.63452025-12-09
CVE-2025-62465 [MEDIUM] CWE-476 CVE-2025-62465: Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service locally.
nvd
CVE-2024-38264P4MEDIUMCVSS 5.9fixed in 10.0.22631.44602024-11-12
CVE-2024-38264 [MEDIUM] CWE-591 CVE-2024-38264: Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
nvd
CVE-2024-20692P4MEDIUMCVSS 5.7fixed in 10.0.22631.30072024-01-09
CVE-2024-20692 [MEDIUM] CWE-326 CVE-2024-20692: Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
nvd
CVE-2024-43547P4MEDIUMCVSS 5.9fixed in 10.0.22631.43172024-10-08
CVE-2024-43547 [MEDIUM] CWE-325 CVE-2024-43547: Windows Kerberos Information Disclosure Vulnerability
Windows Kerberos Information Disclosure Vulnerability
nvd
CVE-2025-21269P4MEDIUMCVSS 4.3fixed in 10.0.22631.47512025-01-14
CVE-2025-21269 [MEDIUM] CWE-41 CVE-2025-21269: Windows HTML Platforms Security Feature Bypass Vulnerability
Windows HTML Platforms Security Feature Bypass Vulnerability
nvd
CVE-2025-53136P4MEDIUMCVSS 5.5fixed in 10.0.22631.57682025-08-12
CVE-2025-53136 [MEDIUM] CWE-200 CVE-2025-53136: Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authori
Exposure of sensitive information to an unauthorized actor in Windows NT OS Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2025-53799P4MEDIUMCVSS 5.5fixed in 10.0.22631.59092025-09-09
CVE-2025-53799 [MEDIUM] CWE-908 CVE-2025-53799: Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclo
Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-20838P4MEDIUMCVSS 5.5fixed in 10.0.22631.64912026-01-13
CVE-2026-20838 [MEDIUM] CWE-209 CVE-2026-20838: Generation of error message containing sensitive information in Windows Kernel allows an authorized
Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2025-53804P4MEDIUMCVSS 5.5fixed in 10.0.22631.59092025-09-09
CVE-2025-53804 [MEDIUM] CWE-200 CVE-2025-53804: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized at
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-21222P4MEDIUMCVSS 5.5fixed in 10.0.22631.66492026-02-10
CVE-2026-21222 [MEDIUM] CWE-532 CVE-2026-21222: Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to
Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2025-29837P4MEDIUMCVSS 5.5fixed in 10.0.22631.53352025-05-13
CVE-2025-29837 [MEDIUM] CWE-59 CVE-2025-29837: Improper link resolution before file access ('link following') in Windows Installer allows an author
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.
nvd