Microsoft Windows 11 Version 23H2 vulnerabilities
1,677 known vulnerabilities affecting microsoft/windows_11_version_23h2.
Total CVEs
1,677
CISA KEV
59
actively exploited
Public exploits
43
Exploited in wild
73
Severity breakdown
CRITICAL27HIGH1180MEDIUM462LOW8
Vulnerabilities
Page 1 of 84
CVE-2025-33073P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.54722025-06-10
CVE-2025-33073 [HIGH] CWE-284 CVE-2025-33073: Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a ne
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-21412P1HIGHCVSS 8.1KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.31552024-02-13
CVE-2024-21412 [HIGH] CWE-693 CVE-2024-21412: Internet Shortcut Files Security Feature Bypass Vulnerability
Internet Shortcut Files Security Feature Bypass Vulnerability
nvd
CVE-2023-36025P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.27152023-11-14
CVE-2023-36025 [HIGH] CVE-2023-36025: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2025-33053P1HIGHCVSS 8.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.54722025-06-10
CVE-2025-33053 [HIGH] CWE-73 CVE-2025-33053: External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-21338P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.31552024-02-13
CVE-2024-21338 [HIGH] CWE-822 CVE-2024-21338: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-30088P1HIGHCVSS 7.0KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.37372024-06-11
CVE-2024-30088 [HIGH] CWE-367 CVE-2024-30088: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2013-3900P1HIGHCVSS 8.8KEVPoCRansomwarevN/A2013-12-11
CVE-2013-3900 [HIGH] CWE-347 CVE-2013-3900: Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Upd
Why is Microsoft republishing a CVE from 2013?
We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format is different from the original CVE published in 2013, ex
nvd
CVE-2025-24054P1MEDIUMCVSS 5.4KEVPoC≥ 10.0.22631.0, < 10.0.22631.50392025-03-11
CVE-2025-24054 [MEDIUM] CWE-73 CVE-2025-24054: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-49039P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.44602024-11-12
CVE-2024-49039 [HIGH] CWE-287 CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
nvd
CVE-2025-30397P1HIGHCVSS 7.5KEVPoC≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-30397 [HIGH] CWE-843 CVE-2025-30397: Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows a
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-29824P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-29824 [HIGH] CWE-416 CVE-2025-29824: Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26633P1HIGHCVSS 7.0KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.50392025-03-11
CVE-2025-26633 [HIGH] CWE-707 CVE-2025-26633: Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2024-49138P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49138 [HIGH] CWE-122 CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-35250P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.37372024-06-11
CVE-2024-35250 [HIGH] CWE-822 CVE-2024-35250: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38193P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38193 [HIGH] CWE-416 CVE-2024-38193: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2024-30051P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.35932024-05-14
CVE-2024-30051 [HIGH] CWE-122 CVE-2024-30051: Windows DWM Core Library Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2025-62215P1HIGHCVSS 7.0KEVPoC≥ 10.0.22631.0, < 10.0.22631.61992025-11-11
CVE-2025-62215 [HIGH] CWE-362 CVE-2025-62215: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-21333P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.47512025-01-14
CVE-2025-21333 [HIGH] CWE-122 CVE-2025-21333: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
nvd
CVE-2026-32202P2MEDIUMCVSS 4.3KEVPoC≥ 10.0.22631.0, < 10.0.22631.69362026-04-14
CVE-2026-32202 [MEDIUM] CWE-693 CVE-2026-32202: Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing ov
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-36424P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.27152023-11-14
CVE-2023-36424 [HIGH] CWE-125 CVE-2023-36424: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
1 / 84Next →