cbcvebase.

Microsoft Windows 11 Version 23H2 vulnerabilities

3,415 known vulnerabilities affecting microsoft/windows_11_version_23h2.

Total CVEs
3,415
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2449MEDIUM858LOW8

Vulnerabilities

Page 85 of 171
CVE-2023-36407P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.27152023-11-14
CVE-2023-36407 [HIGH] CWE-20 CVE-2023-36407: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2026-23668P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.67832026-03-10
CVE-2026-23668 [HIGH] CWE-362 CVE-2026-23668: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-36396P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.27152023-11-14
CVE-2023-36396 [HIGH] CWE-41 CVE-2023-36396: Windows Compressed Folder Remote Code Execution Vulnerability Windows Compressed Folder Remote Code Execution Vulnerability
nvd
CVE-2026-72961P3HIGHCVSS 8.2≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-72961 [HIGH] CWE-122 CVE-2026-72961: Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38184P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.38802024-08-13
CVE-2024-38184 [HIGH] CWE-125 CVE-2024-38184: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-36047P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.27152023-11-14
CVE-2023-36047 [HIGH] CWE-59 CVE-2023-36047: Windows Authentication Elevation of Privilege Vulnerability Windows Authentication Elevation of Privilege Vulnerability
nvd
CVE-2024-49090P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49090 [HIGH] CWE-822 CVE-2024-49090: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-32724P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.54722025-06-10
CVE-2025-32724 [HIGH] CWE-400 CVE-2025-32724: Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allo Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-49088P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49088 [HIGH] CWE-126 CVE-2024-49088: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-21180P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.50392025-03-11
CVE-2025-21180 [HIGH] CWE-122 CVE-2025-21180: Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.
nvd
CVE-2025-27729P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-27729 [HIGH] CWE-416 CVE-2025-27729: Use after free in Windows Shell allows an unauthorized attacker to execute code locally. Use after free in Windows Shell allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-69694P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.75822026-09-08
CVE-2026-69694 [HIGH] CWE-502 CVE-2026-69694: Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authoriz Deserialization of untrusted data in Windows IP Address Management (IPAM) Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-49114P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49114 [HIGH] CWE-820 CVE-2024-49114: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38133P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38133 [HIGH] CWE-138 CVE-2024-38133: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38134P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38134 [HIGH] CWE-125 CVE-2024-38134: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38215P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38215 [HIGH] CWE-190 CVE-2024-38215: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-30079P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.38802024-07-09
CVE-2024-30079 [HIGH] CWE-126 CVE-2024-30079: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd
CVE-2024-43501P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.43172024-10-08
CVE-2024-43501 [HIGH] CWE-59 CVE-2024-43501: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2026-21241P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.66492026-02-10
CVE-2026-21241 [HIGH] CWE-416 CVE-2026-21241: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26675P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-26675 [HIGH] CWE-125 CVE-2025-26675: Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privilege Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
nvd
← Previous85 / 171Next →
Microsoft Windows 11 Version 23H2 vulnerabilities | cvebase