Microsoft Windows 11 23H2 vulnerabilities
3,254 known vulnerabilities affecting microsoft/windows_11_23h2.
Total CVEs
3,254
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL92HIGH2347MEDIUM808LOW7
Vulnerabilities
Page 93 of 163
CVE-2024-21436P3HIGHCVSS 7.8fixed in 10.0.22631.32962024-03-12
CVE-2024-21436 [HIGH] CWE-284 CVE-2024-21436: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-20658P3HIGHCVSS 7.8fixed in 10.0.22631.30072024-01-09
CVE-2024-20658 [HIGH] CWE-125 CVE-2024-20658: Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
nvd
CVE-2024-20681P3HIGHCVSS 7.8fixed in 10.0.22631.30072024-01-09
CVE-2024-20681 [HIGH] CWE-416 CVE-2024-20681: Windows Subsystem for Linux Elevation of Privilege Vulnerability
Windows Subsystem for Linux Elevation of Privilege Vulnerability
nvd
CVE-2024-49107P3HIGHCVSS 7.3fixed in 10.0.22631.46022024-12-12
CVE-2024-49107 [HIGH] CWE-59 CVE-2024-49107: WmsRepair Service Elevation of Privilege Vulnerability
WmsRepair Service Elevation of Privilege Vulnerability
nvd
CVE-2024-26237P3HIGHCVSS 7.8fixed in 10.0.22631.34472024-04-09
CVE-2024-26237 [HIGH] CWE-416 CVE-2024-26237: Windows Defender Credential Guard Elevation of Privilege Vulnerability
Windows Defender Credential Guard Elevation of Privilege Vulnerability
nvd
CVE-2024-43641P3HIGHCVSS 7.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43641 [HIGH] CWE-190 CVE-2024-43641: Windows Registry Elevation of Privilege Vulnerability
Windows Registry Elevation of Privilege Vulnerability
nvd
CVE-2024-43509P3HIGHCVSS 7.8fixed in 10.0.22631.43172024-10-08
CVE-2024-43509 [HIGH] CWE-416 CVE-2024-43509: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-43551P3HIGHCVSS 7.8fixed in 10.0.22631.43172024-10-08
CVE-2024-43551 [HIGH] CWE-59 CVE-2024-43551: Windows Storage Elevation of Privilege Vulnerability
Windows Storage Elevation of Privilege Vulnerability
nvd
CVE-2025-21275P3HIGHCVSS 7.8fixed in 10.0.22631.47512025-01-14
CVE-2025-21275 [HIGH] CWE-285 CVE-2025-21275: Windows App Package Installer Elevation of Privilege Vulnerability
Windows App Package Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-49072P3HIGHCVSS 7.8fixed in 10.0.22631.46022024-12-12
CVE-2024-49072 [HIGH] CWE-122 CVE-2024-49072: Windows Task Scheduler Elevation of Privilege Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
nvd
CVE-2025-21281P3HIGHCVSS 7.8fixed in 10.0.22631.47512025-01-14
CVE-2025-21281 [HIGH] CWE-416 CVE-2025-21281: Microsoft COM for Windows Elevation of Privilege Vulnerability
Microsoft COM for Windows Elevation of Privilege Vulnerability
nvd
CVE-2025-21234P3HIGHCVSS 7.8fixed in 10.0.22631.47512025-01-14
CVE-2025-21234 [HIGH] CWE-20 CVE-2025-21234: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
nvd
CVE-2025-21235P3HIGHCVSS 7.8fixed in 10.0.22631.47512025-01-14
CVE-2025-21235 [HIGH] CWE-20 CVE-2025-21235: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
nvd
CVE-2024-26239P3HIGHCVSS 7.8fixed in 10.0.22631.34472024-04-09
CVE-2024-26239 [HIGH] CWE-122 CVE-2024-26239: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2025-59200P3HIGHCVSS 7.7≤ 10.0.22631.60602025-10-14
CVE-2025-59200 [HIGH] CWE-73 CVE-2025-59200: Concurrent execution using shared resource with improper synchronization ('race condition') in Data
Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.
nvd
CVE-2025-21287P3HIGHCVSS 7.8fixed in 10.0.22631.47512025-01-14
CVE-2025-21287 [HIGH] CWE-269 CVE-2025-21287: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2025-47973P3HIGHCVSS 7.8fixed in 10.0.22631.56242025-07-08
CVE-2025-47973 [HIGH] CWE-126 CVE-2025-47973: Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges l
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2025-47971P3HIGHCVSS 7.8fixed in 10.0.22631.56242025-07-08
CVE-2025-47971 [HIGH] CWE-126 CVE-2025-47971: Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges l
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2025-21382P3HIGHCVSS 7.8fixed in 10.0.22631.47512025-01-14
CVE-2025-21382 [HIGH] CWE-122 CVE-2025-21382: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-43530P3HIGHCVSS 7.8fixed in 10.0.22631.44602024-11-12
CVE-2024-43530 [HIGH] CWE-284 CVE-2024-43530: Windows Update Stack Elevation of Privilege Vulnerability
Windows Update Stack Elevation of Privilege Vulnerability
nvd