Microsoft Windows 11 23H2 vulnerabilities
3,254 known vulnerabilities affecting microsoft/windows_11_23h2.
Total CVEs
3,254
CISA KEV
57
actively exploited
Public exploits
38
Exploited in wild
67
Severity breakdown
CRITICAL92HIGH2347MEDIUM808LOW7
Vulnerabilities
Page 98 of 163
CVE-2026-97829P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97829 [MEDIUM] CWE-125 CVE-2026-97829: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97823P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97823 [MEDIUM] CWE-125 CVE-2026-97823: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97825P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97825 [MEDIUM] CWE-125 CVE-2026-97825: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97821P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97821 [MEDIUM] CWE-125 CVE-2026-97821: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97826P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97826 [MEDIUM] CWE-125 CVE-2026-97826: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97820P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97820 [MEDIUM] CWE-125 CVE-2026-97820: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97822P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97822 [MEDIUM] CWE-125 CVE-2026-97822: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97841P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97841 [MEDIUM] CWE-125 CVE-2026-97841: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97837P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97837 [MEDIUM] CWE-125 CVE-2026-97837: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97838P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97838 [MEDIUM] CWE-125 CVE-2026-97838: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97840P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97840 [MEDIUM] CWE-125 CVE-2026-97840: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97835P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97835 [MEDIUM] CWE-125 CVE-2026-97835: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97839P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97839 [MEDIUM] CWE-125 CVE-2026-97839: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97836P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97836 [MEDIUM] CWE-125 CVE-2026-97836: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97844P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97844 [MEDIUM] CWE-125 CVE-2026-97844: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97831P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97831 [MEDIUM] CWE-125 CVE-2026-97831: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97843P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-97843 [MEDIUM] CWE-125 CVE-2026-97843: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-69968P3MEDIUMCVSS 6.5fixed in 10.0.22631.76522026-10-13
CVE-2026-69968 [MEDIUM] CWE-23 CVE-2026-69968: Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering o
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2026-69449P3MEDIUMCVSS 6.7fixed in 10.0.22631.75822026-09-08
CVE-2026-69449 [MEDIUM] CWE-122 CVE-2026-69449: Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locall
Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.
nvd
CVE-2026-71339P3MEDIUMCVSS 6.7fixed in 10.0.22631.75822026-09-08
CVE-2026-71339 [MEDIUM] CWE-122 CVE-2026-71339: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd