Microsoft Windows 11 Version 23H2 vulnerabilities
3,417 known vulnerabilities affecting microsoft/windows_11_version_23h2.
Total CVEs
3,417
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2451MEDIUM858LOW8
Vulnerabilities
Page 52 of 171
CVE-2026-83838P3HIGHCVSS 8.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83838 [HIGH] CWE-191 CVE-2026-83838: Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacke
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2024-26208P3HIGHCVSS 7.2≥ 10.0.22631.0, < 10.0.22631.34472024-04-09
CVE-2024-26208 [HIGH] CWE-191 CVE-2024-26208: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2025-53149P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-53149 [HIGH] CWE-122 CVE-2025-53149: Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacke
Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85864P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85864 [HIGH] CWE-641 CVE-2026-85864: Improper privilege management in Python allows an authorized attacker to elevate privileges locally.
Improper privilege management in Python allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-24063P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-24063 [HIGH] CWE-122 CVE-2025-24063: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-24067P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.50392025-03-11
CVE-2025-24067 [HIGH] CWE-122 CVE-2025-24067: Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-24066P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.50392025-03-11
CVE-2025-24066 [HIGH] CWE-122 CVE-2025-24066: Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-26170P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.32962024-03-12
CVE-2024-26170 [HIGH] CWE-20 CVE-2024-26170: Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
nvd
CVE-2025-27490P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-27490 [HIGH] CWE-122 CVE-2025-27490: Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26688P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-26688 [HIGH] CWE-121 CVE-2025-26688: Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate
Stack-based buffer overflow in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-35421P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.7079≥ 10.0.22631.0, < 10.0.22631.72192026-05-12
CVE-2026-35421 [HIGH] CWE-122 CVE-2026-35421: Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-69673P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-69673 [HIGH] CWE-59 CVE-2026-69673: Improper link resolution before file access ('link following') in Windows Update allows an authorize
Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-62470P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.63452025-12-09
CVE-2025-62470 [HIGH] CWE-122 CVE-2025-62470: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83836P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83836 [HIGH] CWE-122 CVE-2026-83836: Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-20920P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20920 [HIGH] CWE-416 CVE-2026-20920: Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70109P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70109 [HIGH] CWE-122 CVE-2026-70109: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-70110P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70110 [HIGH] CWE-121 CVE-2026-70110: Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker t
Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-70092P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-70092 [HIGH] CWE-122 CVE-2026-70092: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-50471P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.73762026-07-14
CVE-2026-50471 [HIGH] CWE-122 CVE-2026-50471: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-53155P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-53155 [HIGH] CWE-122 CVE-2025-53155: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd