cbcvebase.

Microsoft Windows 11 23H2 vulnerabilities

3,254 known vulnerabilities affecting microsoft/windows_11_23h2.

Total CVEs
3,254
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL92HIGH2347MEDIUM808LOW7

Vulnerabilities

Page 89 of 163
CVE-2024-38250P3HIGHCVSS 7.8fixed in 10.0.22621.4169fixed in 10.0.22631.41692024-09-10
CVE-2024-38250 [HIGH] CWE-126 CVE-2024-38250: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-38135P3HIGHCVSS 7.8fixed in 10.0.22631.40372024-08-13
CVE-2024-38135 [HIGH] CWE-126 CVE-2024-38135: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
nvd
CVE-2024-29994P3HIGHCVSS 7.8fixed in 10.0.22631.35932024-05-14
CVE-2024-29994 [HIGH] CWE-125 CVE-2024-29994: Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
nvd
CVE-2025-21367P3HIGHCVSS 7.8fixed in 10.0.22631.48902025-02-11
CVE-2025-21367 [HIGH] CWE-416 CVE-2025-21367: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2025-27739P3HIGHCVSS 7.8fixed in 10.0.22631.51892025-04-08
CVE-2025-27739 [HIGH] CWE-822 CVE-2025-27739: Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-21343P3HIGHCVSS 7.5fixed in 10.0.22631.47512025-01-14
CVE-2025-21343 [HIGH] CWE-269 CVE-2025-21343: Windows Web Threat Defense User Service Information Disclosure Vulnerability Windows Web Threat Defense User Service Information Disclosure Vulnerability
nvd
CVE-2024-43516P3HIGHCVSS 7.8fixed in 10.0.22631.43172024-10-08
CVE-2024-43516 [HIGH] CWE-822 CVE-2024-43516: Windows Secure Kernel Mode Elevation of Privilege Vulnerability Windows Secure Kernel Mode Elevation of Privilege Vulnerability
nvd
CVE-2024-38142P3HIGHCVSS 7.8fixed in 10.0.22631.40372024-08-13
CVE-2024-38142 [HIGH] CWE-122 CVE-2024-38142: Windows Secure Kernel Mode Elevation of Privilege Vulnerability Windows Secure Kernel Mode Elevation of Privilege Vulnerability
nvd
CVE-2024-43514P3HIGHCVSS 7.8fixed in 10.0.22631.43172024-10-08
CVE-2024-43514 [HIGH] CWE-415 CVE-2024-43514: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
nvd
CVE-2024-38253P3HIGHCVSS 7.8fixed in 10.0.22621.4169fixed in 10.0.22631.41692024-09-10
CVE-2024-38253 [HIGH] CWE-416 CVE-2024-38253: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2024-38252P3HIGHCVSS 7.8fixed in 10.0.22621.4169fixed in 10.0.22631.41692024-09-10
CVE-2024-38252 [HIGH] CWE-416 CVE-2024-38252: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2024-43640P3HIGHCVSS 7.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43640 [HIGH] CWE-415 CVE-2024-43640: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-21378P3HIGHCVSS 7.8fixed in 10.0.22631.47512025-01-14
CVE-2025-21378 [HIGH] CWE-122 CVE-2025-21378: Windows CSC Service Elevation of Privilege Vulnerability Windows CSC Service Elevation of Privilege Vulnerability
nvd
CVE-2026-48575P3HIGHCVSS 7.9fixed in 10.0.22631.72192026-06-09
CVE-2026-48575 [HIGH] CWE-693 CVE-2026-48575: Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-48570P3HIGHCVSS 7.9fixed in 10.0.22631.72192026-06-09
CVE-2026-48570 [HIGH] CWE-693 CVE-2026-48570: Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-48568P3HIGHCVSS 7.9fixed in 10.0.22631.72192026-06-09
CVE-2026-48568 [HIGH] CWE-693 CVE-2026-48568: Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-45588P3HIGHCVSS 7.9fixed in 10.0.22631.72192026-06-09
CVE-2026-45588 [HIGH] CWE-693 CVE-2026-45588: Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a securi Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2024-43644P3HIGHCVSS 7.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43644 [HIGH] CWE-125 CVE-2024-43644: Windows Client-Side Caching Elevation of Privilege Vulnerability Windows Client-Side Caching Elevation of Privilege Vulnerability
nvd
CVE-2024-43646P3HIGHCVSS 7.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43646 [HIGH] CWE-822 CVE-2024-43646: Windows Secure Kernel Mode Elevation of Privilege Vulnerability Windows Secure Kernel Mode Elevation of Privilege Vulnerability
nvd
CVE-2024-43631P3HIGHCVSS 7.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43631 [HIGH] CWE-822 CVE-2024-43631: Windows Secure Kernel Mode Elevation of Privilege Vulnerability Windows Secure Kernel Mode Elevation of Privilege Vulnerability
nvd
← Previous89 / 163Next →
Microsoft Windows 11 23H2 vulnerabilities | cvebase