Microsoft Windows 11 Version 23H2 vulnerabilities
3,420 known vulnerabilities affecting microsoft/windows_11_version_23h2.
Total CVEs
3,420
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2453MEDIUM859LOW8
Vulnerabilities
Page 29 of 171
CVE-2026-62758P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-62758 [HIGH] CWE-122 CVE-2026-62758: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62755P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-62755 [HIGH] CWE-121 CVE-2026-62755: Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileg
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70014P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70014 [HIGH] CWE-416 CVE-2026-70014: Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over
Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-62813P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-62813 [HIGH] CWE-416 CVE-2026-62813: Use after free in Active Directory Domain Services allows an authorized attacker to execute code ove
Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69757P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69757 [HIGH] CWE-416 CVE-2026-69757: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69761P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69761 [HIGH] CWE-416 CVE-2026-69761: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-21310P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.30072024-01-09
CVE-2024-21310 [HIGH] CWE-197 CVE-2024-21310: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2026-20817P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20817 [HIGH] CWE-280 CVE-2026-20817: Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an aut
Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38054P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.38802024-07-09
CVE-2024-38054 [HIGH] CWE-122 CVE-2024-38054: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38180P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38180 [HIGH] CWE-693 CVE-2024-38180: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2024-21369P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.31552024-02-13
CVE-2024-21369 [HIGH] CWE-122 CVE-2024-21369: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2025-21332P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.47512025-01-14
CVE-2025-21332 [HIGH] CWE-41 CVE-2025-21332: MapUrlToZone Security Feature Bypass Vulnerability
MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2024-21350P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.31552024-02-13
CVE-2024-21350 [HIGH] CWE-190 CVE-2024-21350: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2025-29967P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-29967 [HIGH] CWE-122 CVE-2025-29967: Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to exec
Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-38131P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38131 [HIGH] CWE-591 CVE-2024-38131: Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
nvd
CVE-2025-29964P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-29964 [HIGH] CWE-122 CVE-2025-29964: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-29963P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-29963 [HIGH] CWE-122 CVE-2025-29963: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-32162P3HIGHCVSS 8.4≥ 10.0.22631.0, < 10.0.22631.69362026-04-14
CVE-2026-32162 [HIGH] CWE-349 CVE-2026-32162: Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized atta
Acceptance of extraneous untrusted data with trusted data in Windows COM allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-20843P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20843 [HIGH] CWE-284 CVE-2026-20843: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21238P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.66492026-02-10
CVE-2026-21238 [HIGH] CWE-284 CVE-2026-21238: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attack
Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd