Microsoft Windows 11 Version 23H2 vulnerabilities
3,415 known vulnerabilities affecting microsoft/windows_11_version_23h2.
Total CVEs
3,415
CISA KEV
63
actively exploited
Public exploits
44
Exploited in wild
77
Severity breakdown
CRITICAL100HIGH2449MEDIUM858LOW8
Vulnerabilities
Page 94 of 171
CVE-2026-62753P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.75172026-08-11
CVE-2026-62753 [HIGH] CWE-122 CVE-2026-62753: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83680P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83680 [HIGH] CWE-122 CVE-2026-83680: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45653P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.72192026-06-09
CVE-2026-45653 [HIGH] CWE-122 CVE-2026-45653: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85828P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85828 [HIGH] CWE-122 CVE-2026-85828: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85834P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85834 [HIGH] CWE-122 CVE-2026-85834: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83871P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83871 [HIGH] CWE-122 CVE-2026-83871: Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privilege
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-84014P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-84014 [HIGH] CWE-122 CVE-2026-84014: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85827P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85827 [HIGH] CWE-122 CVE-2026-85827: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83683P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-83683 [MEDIUM] CWE-36 CVE-2026-83683: Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to dis
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-20812P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.64912026-01-13
CVE-2026-20812 [MEDIUM] CWE-20 CVE-2026-20812: Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authoriz
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
nvd
CVE-2026-85840P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-85840 [MEDIUM] CWE-552 CVE-2026-85840: Files or directories accessible to external parties in Windows Event Viewer allows an authorized att
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-88137P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-88137 [MEDIUM] CWE-552 CVE-2026-88137: Files or directories accessible to external parties in WebDAV allows an authorized attacker to discl
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97828P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.76522026-10-13
CVE-2026-97828 [MEDIUM] CWE-126 CVE-2026-97828: Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2025-21220P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.47512025-01-14
CVE-2025-21220 [HIGH] CWE-908 CVE-2025-21220: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2023-36393P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.27152023-11-14
CVE-2023-36393 [HIGH] CWE-426 CVE-2023-36393: Windows User Interface Application Core Remote Code Execution Vulnerability
Windows User Interface Application Core Remote Code Execution Vulnerability
nvd
CVE-2024-30073P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.41692024-09-10
CVE-2024-30073 [HIGH] CWE-41 CVE-2024-30073: Windows Security Zone Mapping Security Feature Bypass Vulnerability
Windows Security Zone Mapping Security Feature Bypass Vulnerability
nvd
CVE-2024-30072P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.37372024-06-11
CVE-2024-30072 [HIGH] CWE-190 CVE-2024-30072: Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
nvd
CVE-2024-21442P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.32962024-03-12
CVE-2024-21442 [HIGH] CWE-170 CVE-2024-21442: Windows USB Print Driver Elevation of Privilege Vulnerability
Windows USB Print Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38034P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.38802024-07-09
CVE-2024-38034 [HIGH] CWE-190 CVE-2024-38034: Windows Filtering Platform Elevation of Privilege Vulnerability
Windows Filtering Platform Elevation of Privilege Vulnerability
nvd
CVE-2024-21436P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.32962024-03-12
CVE-2024-21436 [HIGH] CWE-284 CVE-2024-21436: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd