Microsoft Windows 11 Version 23H2 vulnerabilities
3,420 known vulnerabilities affecting microsoft/windows_11_version_23h2.
Total CVEs
3,420
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2451MEDIUM861LOW8
Vulnerabilities
Page 18 of 171
CVE-2026-70229P3HIGHCVSS 8.1≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70229 [HIGH] CWE-863 CVE-2026-70229: Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execu
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62792P3HIGHCVSS 8.1≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-62792 [HIGH] CWE-121 CVE-2026-62792: Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-26230P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.34472024-04-09
CVE-2024-26230 [HIGH] CWE-416 CVE-2024-26230: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
nvd
CVE-2025-50177P3HIGHCVSS 8.1≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-50177 [HIGH] CWE-362 CVE-2025-50177: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49104P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49104 [HIGH] CWE-122 CVE-2024-49104: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49102P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49102 [HIGH] CWE-122 CVE-2024-49102: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2025-21223P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.47512025-01-14
CVE-2025-21223 [HIGH] CWE-122 CVE-2025-21223: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43622P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.44602024-11-12
CVE-2024-43622 [HIGH] CWE-122 CVE-2024-43622: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43620P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.44602024-11-12
CVE-2024-43620 [HIGH] CWE-122 CVE-2024-43620: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43621P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.44602024-11-12
CVE-2024-43621 [HIGH] CWE-122 CVE-2024-43621: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21239P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.47512025-01-14
CVE-2025-21239 [HIGH] CWE-122 CVE-2025-21239: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21241P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.47512025-01-14
CVE-2025-21241 [HIGH] CWE-122 CVE-2025-21241: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21248P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.47512025-01-14
CVE-2025-21248 [HIGH] CWE-122 CVE-2025-21248: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2026-105008P3CRITICALCVSS 9.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-105008 [CRITICAL] CWE-420 CVE-2026-105008: No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-33066P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.54722025-06-10
CVE-2025-33066 [HIGH] CWE-122 CVE-2025-33066: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-47289P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.72192026-06-09
CVE-2026-47289 [HIGH] CWE-122 CVE-2026-47289: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73018P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-73018 [HIGH] CWE-122 CVE-2026-73018: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83998P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-83998 [HIGH] CWE-122 CVE-2026-83998: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72986P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-72986 [HIGH] CWE-122 CVE-2026-72986: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-68828P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-68828 [HIGH] CWE-122 CVE-2026-68828: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd