Windows 11 version 23H2 vulnerabilities

335 known vulnerabilities in Windows 11 version 23H2 from Microsoft. 326 are rated high or critical, and 63 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Windows Hyper-V Privilege Escalation Exploited

  CVE-2024-38080Jul 9, 2024MicrosoftEPSS 7.06%

  Windows Hyper-V Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Exploited

  CVE-2024-35250Jun 11, 2024MicrosoftEPSS 25.2%

  Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

• 7.0 High severity

  Microsoft Windows Kernel TOCTOU Race Condition Exploited

  CVE-2024-30088Jun 11, 2024MicrosoftEPSS 68.2%

  Windows Kernel Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft DWM Core Library Privilege Escalation Exploited

  CVE-2024-30051May 14, 2024MicrosoftEPSS 6.17%

  Windows DWM Core Library Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows MSHTML Platform Security Feature Bypass Exploited

  CVE-2024-30040May 14, 2024MicrosoftEPSS 3.94%

  Windows MSHTML Platform Security Feature Bypass Vulnerability

• 8.8 High severity

  Microsoft SmartScreen Prompt Security Feature Bypass Exploited

  CVE-2024-29988Apr 9, 2024MicrosoftEPSS 45.2%

  SmartScreen Prompt Security Feature Bypass Vulnerability

• 7.8 High severity

  Microsoft Windows Error Reporting Service Improper Privilege Management Exploited

  CVE-2024-26169Mar 12, 2024MicrosoftEPSS 4.01%

  Windows Error Reporting Service Elevation of Privilege Vulnerability

• 8.1 High severity

  Microsoft Windows Internet Shortcut Files Security Feature Bypass Exploited

  CVE-2024-21412Feb 13, 2024MicrosoftEPSS 99.4%

  Internet Shortcut Files Security Feature Bypass Vulnerability

• 7.6 High severity

  Microsoft Windows SmartScreen Security Feature Bypass Exploited

  CVE-2024-21351Feb 13, 2024MicrosoftEPSS 27.8%

  Windows SmartScreen Security Feature Bypass Vulnerability

• 7.8 High severity

  Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Exploited

  CVE-2024-21338Feb 13, 2024MicrosoftEPSS 62.2%

  Windows Kernel Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Out-of-Bounds Read Exploited

  CVE-2023-36424Nov 14, 2023MicrosoftEPSS 12.1%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Exploited

  CVE-2023-36036Nov 14, 2023MicrosoftEPSS 16.7%

  Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Exploited

  CVE-2023-36033Nov 14, 2023MicrosoftEPSS 10.9%

  Windows DWM Core Library Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows SmartScreen Security Feature Bypass Exploited

  CVE-2023-36025Nov 14, 2023MicrosoftEPSS 88.2%

  Windows SmartScreen Security Feature Bypass Vulnerability

• 8.8 High severity

  Microsoft WinVerifyTrust function Remote Code Execution Exploited

  CVE-2013-3900Dec 11, 2013MicrosoftEPSS 44.6%

  Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo