Microsoft Windows 11 Version 23H2 vulnerabilities
3,415 known vulnerabilities affecting microsoft/windows_11_version_23h2.
Total CVEs
3,415
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2449MEDIUM858LOW8
Vulnerabilities
Page 62 of 171
CVE-2026-103558P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-103558 [HIGH] CWE-833 CVE-2026-103558: Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny
Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-88101P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-88101 [HIGH] CWE-1390 CVE-2026-88101: Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-108131P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-108131 [HIGH] CWE-295 CVE-2026-108131: No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacke
No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-77896P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-77896 [HIGH] CWE-190 CVE-2026-77896: Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny serv
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-60704P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.61992025-11-11
CVE-2025-60704 [HIGH] CWE-325 CVE-2025-60704: Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges
Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-83739P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83739 [HIGH] CWE-416 CVE-2026-83739: Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
nvd
CVE-2026-69347P3HIGHCVSS 7.4≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69347 [HIGH] CWE-122 CVE-2026-69347: Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
nvd
CVE-2024-38085P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.38802024-07-09
CVE-2024-38085 [HIGH] CWE-416 CVE-2024-38085: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-30032P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.35932024-05-14
CVE-2024-30032 [HIGH] CWE-416 CVE-2024-30032: Windows DWM Core Library Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2024-20653P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.30072024-01-09
CVE-2024-20653 [HIGH] CWE-125 CVE-2024-20653: Microsoft Common Log File System Elevation of Privilege Vulnerability
Microsoft Common Log File System Elevation of Privilege Vulnerability
nvd
CVE-2024-43629P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.44602024-11-12
CVE-2024-43629 [HIGH] CWE-822 CVE-2024-43629: Windows DWM Core Library Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2024-38257P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.41692024-09-10
CVE-2024-38257 [HIGH] CWE-908 CVE-2024-38257: Microsoft AllJoyn API Information Disclosure Vulnerability
Microsoft AllJoyn API Information Disclosure Vulnerability
nvd
CVE-2024-38141P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38141 [HIGH] CWE-416 CVE-2024-38141: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2024-38150P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38150 [HIGH] CWE-416 CVE-2024-38150: Windows DWM Core Library Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2025-21420P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.48902025-02-11
CVE-2025-21420 [HIGH] CWE-59 CVE-2025-21420: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
nvd
CVE-2024-43560P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.43172024-10-08
CVE-2024-43560 [HIGH] CWE-122 CVE-2024-43560: Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-21292P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.47512025-01-14
CVE-2025-21292 [HIGH] CWE-94 CVE-2025-21292: Windows Search Service Elevation of Privilege Vulnerability
Windows Search Service Elevation of Privilege Vulnerability
nvd
CVE-2026-62702P3HIGHCVSS 8.6≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-62702 [HIGH] CWE-476 CVE-2026-62702: Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-49687P3HIGHCVSS 8.8≥ 10.0.22631.0, < 10.0.22631.56242025-07-08
CVE-2025-49687 [HIGH] CWE-125 CVE-2025-49687: Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate p
Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-27737P3HIGHCVSS 8.6≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-27737 [HIGH] CWE-20 CVE-2025-27737: Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass
Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.
nvd