microsoft / windows_11_23h2
761 known vulnerabilities in microsoft windows_11_23h2.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2024-21412 | Act now | 95.4% | 8.1 | ● | Internet Shortcut Files Security Feature Bypass Vulnerability |
| CVE-2026-33824 | Act now | 72.7% | 9.8 | ● | Double free in Windows IKE Extension allows an unauthorized attacker to execute … |
| CVE-2024-30088 | Act now | 68.2% | 7.0 | ● | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2026-32202 | Act now | 63.7% | 4.3 | ● | Protection mechanism failure in Windows Shell allows an unauthorized attacker to… |
| CVE-2024-21338 | Act now | 59.8% | 7.8 | ● | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-43461 | Act now | 54.5% | 8.8 | ● | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2025-26633 | Act now | 30.4% | 7.0 | ● | Improper neutralization in Microsoft Management Console allows an unauthorized a… |
| CVE-2024-21351 | Act now | 30.3% | 7.6 | ● | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2024-49039 | Act now | 14.2% | 8.8 | ● | Windows Task Scheduler Elevation of Privilege Vulnerability |
| CVE-2024-38217 | Act now | 10.0% | 5.4 | ● | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-38014 | Act now | 6.3% | 7.8 | ● | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2026-68820 | Act now | 6.2% | 7.0 | ● | Use after free in Windows Ancillary Function Driver for WinSock allows an author… |
| CVE-2026-20805 | Act now | 5.2% | 5.5 | ● | Exposure of sensitive information to an unauthorized actor in Desktop Windows Ma… |
| CVE-2026-81963 | Act now | 0.6% | 7.8 | ● | Improper link resolution before file access ('link following') in Windows Update… |
| CVE-2026-49160 | High | 53.8% | 7.5 | Uncontrolled resource consumption in HTTP/2 allows an unauthorized attacker to d… | |
| CVE-2024-21357 | Medium | 26.9% | 8.1 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | |
| CVE-2026-47291 | Medium | 22.8% | 9.8 | Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attack… | |
| CVE-2026-20872 | Medium | 20.1% | 6.5 | External control of file name or path in Windows NTLM allows an unauthorized att… | |
| CVE-2026-20925 | Medium | 18.2% | 6.5 | External control of file name or path in Windows NTLM allows an unauthorized att… | |
| CVE-2026-45657 | Medium | 15.5% | 9.8 | Use after free in Windows Kernel allows an unauthorized attacker to execute code… | |
| CVE-2024-21371 | Medium | 10.9% | 7.0 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2026-20860 | Medium | 8.4% | 7.8 | Access of resource using incompatible type ('type confusion') in Windows Ancilla… | |
| CVE-2026-42980 | Medium | 6.9% | 7.8 | Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authori… | |
| CVE-2024-38244 | Medium | 6.2% | 7.8 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | |
| CVE-2024-38241 | Medium | 6.0% | 7.8 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | |
| CVE-2026-20817 | Medium | 5.5% | 7.8 | Improper handling of insufficient permissions or privileges in Windows Error Rep… | |
| CVE-2026-20840 | Medium | 4.7% | 7.8 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to exec… | |
| CVE-2024-38257 | Medium | 4.5% | 7.5 | Microsoft AllJoyn API Information Disclosure Vulnerability | |
| CVE-2026-20871 | Medium | 4.2% | 7.8 | Use after free in Desktop Windows Manager allows an authorized attacker to eleva… | |
| CVE-2024-21346 | Medium | 4.1% | 7.8 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2026-61358 | Medium | 3.7% | 7.8 | Improper link resolution before file access ('link following') in Windows Access… | |
| CVE-2026-45586 | Medium | 3.6% | 7.8 | Improper link resolution before file access ('link following') in Windows Collab… | |
| CVE-2026-20843 | Medium | 3.5% | 7.8 | Improper access control in Windows Routing and Remote Access Service (RRAS) allo… | |
| CVE-2026-62696 | Medium | 3.4% | 7.8 | Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistan… | |
| CVE-2024-38237 | Medium | 3.4% | 7.8 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | |
| CVE-2024-38242 | Medium | 3.4% | 7.8 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability | |
| CVE-2026-62832 | Medium | 3.3% | 7.8 | Improper link resolution before file access ('link following') in Windows User P… | |
| CVE-2026-20929 | Medium | 2.9% | 7.5 | Improper access control in Windows HTTP.sys allows an authorized attacker to ele… | |
| CVE-2026-65775 | Medium | 2.6% | 7.8 | Use after free in Windows Win32K allows an authorized attacker to elevate privil… | |
| CVE-2026-20820 | Medium | 2.6% | 7.8 | Heap-based buffer overflow in Windows Common Log File System Driver allows an au… | |
| CVE-2026-20816 | Medium | 2.5% | 7.8 | Time-of-check time-of-use (toctou) race condition in Windows Installer allows an… | |
| CVE-2026-42989 | Medium | 2.3% | 7.8 | Improper link resolution before file access ('link following') in Winlogon allow… | |
| CVE-2024-21348 | Medium | 2.2% | 7.5 | Internet Connection Sharing (ICS) Denial of Service Vulnerability | |
| CVE-2026-33116 | Medium | 2.1% | 7.5 | Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, … | |
| CVE-2026-61930 | Medium | 2.1% | 7.8 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to el… | |
| CVE-2026-62741 | Medium | 2.1% | 7.8 | Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized … | |
| CVE-2026-42905 | Medium | 2.0% | 7.8 | Use after free in Windows DWM Core Library allows an authorized attacker to elev… | |
| CVE-2026-42986 | Medium | 2.0% | 7.8 | Use after free in Microsoft Graphics Component allows an authorized attacker to … | |
| CVE-2026-62783 | Medium | 2.0% | 7.8 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an… | |
| CVE-2026-62888 | Medium | 2.0% | 7.8 | Use after free in Windows DWM Core Library allows an authorized attacker to elev… |
Page 1 of 16
Next →