Microsoft Windows 11 Version 23H2 vulnerabilities
3,414 known vulnerabilities affecting microsoft/windows_11_version_23h2.
Total CVEs
3,414
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2448MEDIUM858LOW8
Vulnerabilities
Page 118 of 171
CVE-2026-20863P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20863 [HIGH] CWE-415 CVE-2026-20863: Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-60716P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.61992025-11-11
CVE-2025-60716 [HIGH] CWE-416 CVE-2025-60716: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-27475P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-27475 [HIGH] CWE-591 CVE-2025-27475: Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized atta
Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55685P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-55685 [HIGH] CWE-416 CVE-2025-55685: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55689P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-55689 [HIGH] CWE-416 CVE-2025-55689: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55686P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-55686 [HIGH] CWE-416 CVE-2025-55686: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55331P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-55331 [HIGH] CWE-416 CVE-2025-55331: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83505P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83505 [HIGH] CWE-367 CVE-2026-83505: Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize
Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83785P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83785 [HIGH] CWE-416 CVE-2026-83785: Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privile
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53134P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-53134 [HIGH] CWE-200 CVE-2025-53134: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69549P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69549 [HIGH] CWE-125 CVE-2026-69549: Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to eleva
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72955P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-72955 [HIGH] CWE-416 CVE-2026-72955: Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate p
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83575P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83575 [HIGH] CWE-416 CVE-2026-83575: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83564P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83564 [HIGH] CWE-416 CVE-2026-83564: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69387P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-69387 [HIGH] CWE-416 CVE-2026-69387: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83574P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83574 [HIGH] CWE-416 CVE-2026-83574: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70156P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70156 [HIGH] CWE-416 CVE-2026-70156: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-20869P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20869 [HIGH] CWE-362 CVE-2026-20869: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Local Session Manager (LSM) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55678P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-55678 [HIGH] CWE-416 CVE-2025-55678: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85355P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85355 [HIGH] CWE-829 CVE-2026-85355: Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver al
Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd