Microsoft Windows 11 Version 23H2 vulnerabilities

1,661 known vulnerabilities affecting microsoft/windows_11_version_23h2.

Total CVEs

1,661

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL25HIGH1170MEDIUM458LOW8

Vulnerabilities

SortPage 56 of 84

CVE-2026-45597P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.72192026-06-09

CVE-2026-45597 [HIGH] CWE-362 CVE-2026-45597: Concurrent execution using shared resource with improper synchronization ('race condition') in UI Au Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-45601P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.72192026-06-09

CVE-2026-45601 [HIGH] CWE-362 CVE-2026-45601: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-45596P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.72192026-06-09

CVE-2026-45596 [HIGH] CWE-362 CVE-2026-45596: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-45598P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.72192026-06-09

CVE-2026-45598 [HIGH] CWE-362 CVE-2026-45598: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-45603P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.72192026-06-09

CVE-2026-45603 [HIGH] CWE-362 CVE-2026-45603: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-24996P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.50392025-03-11

CVE-2025-24996 [MEDIUM] CWE-73 CVE-2025-24996: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

nvd

CVE-2026-26155P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.69362026-04-14

CVE-2026-26155 [MEDIUM] CWE-126 CVE-2026-26155: Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

nvd

CVE-2026-42903P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.72192026-06-09

CVE-2026-42903 [MEDIUM] CWE-476 CVE-2026-42903: Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a ne Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network.

nvd

CVE-2025-21276P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.47512025-01-14

CVE-2025-21276 [HIGH] CWE-191 CVE-2025-21276: Windows MapUrlToZone Denial of Service Vulnerability Windows MapUrlToZone Denial of Service Vulnerability

nvd

CVE-2025-21207P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.47512025-01-14

CVE-2025-21207 [HIGH] CWE-400 CVE-2025-21207: Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability

nvd

CVE-2025-48819P3HIGHCVSS 7.1≥ 10.0.22631.0, < 10.0.22631.56242025-07-08

CVE-2025-48819 [HIGH] CWE-591 CVE-2025-48819: Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.

nvd

CVE-2025-53139P3HIGHCVSS 7.1≥ 10.0.22631.0, < 10.0.22631.60602025-10-14

CVE-2025-53139 [HIGH] CWE-319 CVE-2025-53139: Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally.

nvd

CVE-2025-58735P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.60602025-10-14

CVE-2025-58735 [HIGH] CWE-416 CVE-2025-58735: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-58732P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.60602025-10-14

CVE-2025-58732 [HIGH] CWE-416 CVE-2025-58732: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.

nvd

CVE-2025-26649P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-26649 [HIGH] CWE-362 CVE-2025-26649: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-29841P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.53352025-05-13

CVE-2025-29841 [HIGH] CWE-362 CVE-2025-29841: Concurrent execution using shared resource with improper synchronization ('race condition') in Unive Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-47975P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.56242025-07-08

CVE-2025-47975 [HIGH] CWE-415 CVE-2025-47975: Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally. Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-27492P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-27492 [HIGH] CWE-362 CVE-2025-27492: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53807P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.59092025-09-09

CVE-2025-53807 [HIGH] CWE-362 CVE-2025-53807: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-62218P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.61992025-11-11

CVE-2025-62218 [HIGH] CWE-362 CVE-2025-62218: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

nvd

← Previous56 / 84Next →