Microsoft Windows 11 23H2 vulnerabilities
3,254 known vulnerabilities affecting microsoft/windows_11_23h2.
Total CVEs
3,254
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL92HIGH2347MEDIUM808LOW7
Vulnerabilities
Page 87 of 163
CVE-2026-102191P3HIGHCVSS 7.0fixed in 10.0.22631.76522026-10-13
CVE-2026-102191 [HIGH] CWE-122 CVE-2026-102191: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70573P3HIGHCVSS 7.0fixed in 10.0.22631.75822026-09-08
CVE-2026-70573 [HIGH] CWE-20 CVE-2026-70573: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83827P3HIGHCVSS 7.0fixed in 10.0.22631.76522026-10-13
CVE-2026-83827 [HIGH] CWE-122 CVE-2026-83827: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate
Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83708P3HIGHCVSS 7.0fixed in 10.0.22631.76522026-10-13
CVE-2026-83708 [HIGH] CWE-121 CVE-2026-83708: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70578P3HIGHCVSS 7.0fixed in 10.0.22631.75822026-09-08
CVE-2026-70578 [HIGH] CWE-122 CVE-2026-70578: Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate priv
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69468P3HIGHCVSS 7.0fixed in 10.0.22631.75822026-09-08
CVE-2026-69468 [HIGH] CWE-122 CVE-2026-69468: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50472P3HIGHCVSS 7.0fixed in 10.0.22631.75172026-08-11
CVE-2026-50472 [HIGH] CWE-122 CVE-2026-50472: Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges loca
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26635P3MEDIUMCVSS 6.5fixed in 10.0.22631.51892025-04-08
CVE-2025-26635 [MEDIUM] CWE-1390 CVE-2025-26635: Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.
nvd
CVE-2024-21371P3HIGHCVSS 7.0fixed in 10.0.22631.31552024-02-13
CVE-2024-21371 [HIGH] CWE-367 CVE-2024-21371: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2025-27473P3HIGHCVSS 7.5fixed in 10.0.22631.51892025-04-08
CVE-2025-27473 [HIGH] CWE-400 CVE-2025-27473: Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny servic
Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-38064P3HIGHCVSS 7.5fixed in 10.0.22631.38802024-07-09
CVE-2024-38064 [HIGH] CWE-908 CVE-2024-38064: Windows TCP/IP Information Disclosure Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2024-43625P3HIGHCVSS 8.1fixed in 10.0.22631.44602024-11-12
CVE-2024-43625 [HIGH] CWE-416 CVE-2024-43625: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
nvd
CVE-2024-49076P3HIGHCVSS 7.8fixed in 10.0.22631.46022024-12-12
CVE-2024-49076 [HIGH] CWE-287 CVE-2024-49076: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
nvd
CVE-2024-30086P3HIGHCVSS 7.8fixed in 10.0.22631.37372024-06-11
CVE-2024-30086 [HIGH] CWE-416 CVE-2024-30086: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2024-38051P3HIGHCVSS 7.8fixed in 10.0.22631.38802024-07-09
CVE-2024-38051 [HIGH] CWE-122 CVE-2024-38051: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2024-38185P3HIGHCVSS 7.8fixed in 10.0.22631.38802024-08-13
CVE-2024-38185 [HIGH] CWE-822 CVE-2024-38185: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38187P3HIGHCVSS 7.8fixed in 10.0.22631.38802024-08-13
CVE-2024-38187 [HIGH] CWE-822 CVE-2024-38187: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-30095P3HIGHCVSS 7.8fixed in 10.0.22631.37372024-06-11
CVE-2024-30095 [HIGH] CWE-122 CVE-2024-30095: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49079P3HIGHCVSS 7.8fixed in 10.0.22631.46022024-12-12
CVE-2024-49079 [HIGH] CWE-416 CVE-2024-49079: Input Method Editor (IME) Remote Code Execution Vulnerability
Input Method Editor (IME) Remote Code Execution Vulnerability
nvd
CVE-2024-38249P3HIGHCVSS 7.8fixed in 10.0.22621.4169fixed in 10.0.22631.41692024-09-10
CVE-2024-38249 [HIGH] CWE-416 CVE-2024-38249: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd