Windows 11 23h2 vulnerabilities

301 known vulnerabilities in Windows 11 23h2 from Microsoft. 291 are rated high or critical, and 64 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Windows 10 Version 1809: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2025-55696Oct 14, 2025Microsoft

  Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55687Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2025-55680Oct 14, 2025Microsoft

  Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55328Oct 14, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 version 22H2: Reliance on Untrusted Inputs in a Security Decision

  CVE-2025-53717Oct 14, 2025Microsoft

  Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Microsoft Windows Untrusted Pointer Dereference Exploited

  CVE-2025-24990Oct 14, 2025MicrosoftEPSS 7.95%

  Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulati

• 7.8 High severity

  Windows 10 Version 1507: Stack-based Buffer Overflow

  CVE-2025-24052Oct 14, 2025MicrosoftEPSS 2.54%

  Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulati

• 7.0 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-59220Sep 18, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

• 9.8 Critical severity

  Windows 10 Version 1507: Improper Authentication

  CVE-2025-55234Sep 9, 2025MicrosoftEPSS 20.8%

  SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already suppo

• 7.8 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55228Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55224Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-55223Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-54919Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.

• 7.8 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-54913Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-54115Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-54114Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-54092Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-53807Sep 9, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  PowerShell 7.4: Improper Restriction of Communication Channel to Intended Endpoints

  CVE-2025-49734Sep 9, 2025Microsoft

  Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows: User Interface (UI) Misrepresentation of Critical Information

  CVE-2025-9491Aug 26, 2025MicrosoftEPSS 76%

  Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability

• 7.8 High severity

  Windows 10 Version 1507: Access of Resource Using Incompatible Type

  CVE-2025-53726Aug 12, 2025Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1507: Access of Resource Using Incompatible Type

  CVE-2025-53725Aug 12, 2025Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1507: Access of Resource Using Incompatible Type

  CVE-2025-53724Aug 12, 2025Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 8.8 High severity

  Windows 10 Version 1507: Access of Resource Using Incompatible Type

  CVE-2025-53145Aug 12, 2025MicrosoftEPSS 11.6%

  Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.

• 8.8 High severity

  Windows 10 Version 1507: Access of Resource Using Incompatible Type

  CVE-2025-53144Aug 12, 2025MicrosoftEPSS 11.6%

  Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.

• 8.8 High severity

  Windows 10 Version 1507: Access of Resource Using Incompatible Type

  CVE-2025-53143Aug 12, 2025MicrosoftEPSS 12.3%

  Access of resource using incompatible type ('type confusion') in Windows Message Queuing allows an authorized attacker to execute code over a network.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-53135Aug 12, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1507: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2025-53134Aug 12, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-53132Aug 12, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Improper Handling of Insufficient Permissions or Privileges

  CVE-2025-50170Aug 12, 2025Microsoft

  Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-50167Aug 12, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1507: Heap-based Buffer Overflow

  CVE-2025-50155Aug 12, 2025Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-49762Aug 12, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.4 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-49690Jul 8, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access Management Service (camsvc) allows an unauthorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-49665Jul 8, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1507: Improper Link Resolution Before File Access

  CVE-2025-48820Jul 8, 2025Microsoft

  Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

• 7.1 High severity

  Windows 10 Version 1507: Sensitive Data Storage in Improperly Locked Memory

  CVE-2025-48819Jul 8, 2025Microsoft

  Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over an adjacent network.

• 7.5 High severity

  Windows 10 Version 1607: Missing Authentication for Critical Functionality

  CVE-2025-48814Jul 8, 2025MicrosoftEPSS 1.27%

  Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an unauthorized attacker to bypass a security feature over a network.

• 8.0 High severity

  Windows 10 Version 1507: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2025-47972Jul 8, 2025Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges over a network.

• 8.8 High severity

  Microsoft Windows SMB Client Improper Access Control Exploited

  CVE-2025-33073Jun 10, 2025MicrosoftEPSS 82.8%

  Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.