Microsoft Windows 11 Version 23H2 vulnerabilities
3,420 known vulnerabilities affecting microsoft/windows_11_version_23h2.
Total CVEs
3,420
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2453MEDIUM859LOW8
Vulnerabilities
Page 28 of 171
CVE-2026-42989P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.72192026-06-09
CVE-2026-42989 [HIGH] CWE-59 CVE-2026-42989: Improper link resolution before file access ('link following') in Winlogon allows an authorized atta
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-58722P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-58722 [HIGH] CWE-122 CVE-2025-58722: Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-49118P3HIGHCVSS 8.1≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49118 [HIGH] CWE-416 CVE-2024-49118: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-38045P3HIGHCVSS 8.1≥ 10.0.22631.0, < 10.0.22631.41692024-09-10
CVE-2024-38045 [HIGH] CWE-122 CVE-2024-38045: Windows TCP/IP Remote Code Execution Vulnerability
Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2024-49127P3HIGHCVSS 8.1≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49127 [HIGH] CWE-416 CVE-2024-49127: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2026-20856P3HIGHCVSS 8.1≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20856 [HIGH] CWE-20 CVE-2026-20856: Improper input validation in Windows Server Update Service allows an unauthorized attacker to execut
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-29810P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-29810 [HIGH] CWE-284 CVE-2025-29810: Improper access control in Active Directory Domain Services allows an authorized attacker to elevate
Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-70342P3HIGHCVSS 8.1≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-70342 [HIGH] CWE-416 CVE-2026-70342: Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to e
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-85926P3HIGHCVSS 8.1≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85926 [HIGH] CWE-416 CVE-2026-85926: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-62452P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.61992025-11-11
CVE-2025-62452 [HIGH] CWE-122 CVE-2025-62452: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
nvd
CVE-2025-60715P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.61992025-11-11
CVE-2025-60715 [HIGH] CWE-122 CVE-2025-60715: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69462P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69462 [HIGH] CWE-122 CVE-2026-69462: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-68894P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-68894 [HIGH] CWE-122 CVE-2026-68894: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-68876P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-68876 [HIGH] CWE-122 CVE-2026-68876: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69271P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69271 [HIGH] CWE-122 CVE-2026-69271: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69363P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.75822026-10-13
CVE-2026-69363 [HIGH] CWE-122 CVE-2026-69363: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-26218P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.34472024-04-09
CVE-2024-26218 [HIGH] CWE-367 CVE-2024-26218: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2026-83699P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83699 [HIGH] CWE-121 CVE-2026-83699: Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attack
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69455P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69455 [HIGH] CWE-122 CVE-2026-69455: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62783P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-62783 [HIGH] CWE-122 CVE-2026-62783: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd