Microsoft Windows 11 Version 23H2 vulnerabilities
1,677 known vulnerabilities affecting microsoft/windows_11_version_23h2.
Total CVEs
1,677
CISA KEV
59
actively exploited
Public exploits
43
Exploited in wild
73
Severity breakdown
CRITICAL27HIGH1180MEDIUM462LOW8
Vulnerabilities
Page 2 of 84
CVE-2024-38080P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.38802024-07-09
CVE-2024-38080 [HIGH] CWE-190 CVE-2024-38080: Windows Hyper-V Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2025-24990P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-24990 [HIGH] CWE-822 CVE-2025-24990: Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update.
Fax modem hardware dependent on this specific driver will no longer work on Window
nvd
CVE-2026-20805P2MEDIUMCVSS 5.5KEVPoC≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20805 [MEDIUM] CWE-200 CVE-2026-20805: Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an auth
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.
nvd
CVE-2024-43572P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.43172024-10-08
CVE-2024-43572 [HIGH] CWE-707 CVE-2024-43572: Microsoft Management Console Remote Code Execution Vulnerability
Microsoft Management Console Remote Code Execution Vulnerability
nvd
CVE-2024-29988P1HIGHCVSS 8.8KEV≥ 10.0.22631.0, < 10.0.22631.34472024-04-09
CVE-2024-29988 [HIGH] CWE-693 CVE-2024-29988: SmartScreen Prompt Security Feature Bypass Vulnerability
SmartScreen Prompt Security Feature Bypass Vulnerability
nvd
CVE-2026-21510P1HIGHCVSS 8.8KEV≥ 10.0.22631.0, < 10.0.22631.66492026-02-10
CVE-2026-21510 [HIGH] CWE-693 CVE-2026-21510: Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security f
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-21513P1HIGHCVSS 8.8KEV≥ 10.0.22631.0, < 10.0.22631.66492026-02-10
CVE-2026-21513 [HIGH] CWE-693 CVE-2026-21513: Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a securit
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-36036P1HIGHCVSS 7.8KEVRansomware≥ 10.0.22631.0, < 10.0.22631.27152023-11-14
CVE-2023-36036 [HIGH] CWE-122 CVE-2023-36036: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-21351P1HIGHCVSS 7.6KEV≥ 10.0.22631.0, < 10.0.22631.31552024-02-13
CVE-2024-21351 [HIGH] CWE-94 CVE-2024-21351: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2024-26169P1HIGHCVSS 7.8KEVRansomware≥ 10.0.22631.0, < 10.0.22631.32962024-03-12
CVE-2024-26169 [HIGH] CWE-269 CVE-2024-26169: Windows Error Reporting Service Elevation of Privilege Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
nvd
CVE-2024-30040P1HIGHCVSS 8.8KEV≥ 10.0.22631.0, < 10.0.22631.35932024-05-14
CVE-2024-30040 [HIGH] CWE-20 CVE-2024-30040: Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows MSHTML Platform Security Feature Bypass Vulnerability
nvd
CVE-2026-21533P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.66492026-02-10
CVE-2026-21533 [HIGH] CWE-269 CVE-2026-21533: Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate pri
Improper privilege management in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-62221P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.63452025-12-09
CVE-2025-62221 [HIGH] CWE-416 CVE-2025-62221: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-30400P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-30400 [HIGH] CWE-416 CVE-2025-30400: Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59230P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-59230 [HIGH] CWE-284 CVE-2025-59230: Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21519P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.66492026-02-10
CVE-2026-21519 [HIGH] CWE-843 CVE-2026-21519: Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an au
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-32701P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-32701 [HIGH] CWE-416 CVE-2025-32701: Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38213P1MEDIUMCVSS 6.5KEV≥ 10.0.22631.0, < 10.0.22631.37372024-08-13
CVE-2024-38213 [MEDIUM] CWE-693 CVE-2024-38213: Windows Mark of the Web Security Feature Bypass Vulnerability
Windows Mark of the Web Security Feature Bypass Vulnerability
nvd
CVE-2025-32706P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-32706 [HIGH] CWE-20 CVE-2025-32706: Improper input validation in Windows Common Log File System Driver allows an authorized attacker to
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-24993P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.50392025-03-11
CVE-2025-24993 [HIGH] CWE-122 CVE-2025-24993: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
nvd