Login Request a demo
W1
Product
Windows 11 version 23H2
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
3,419
CVEs
63
On KEV
9.9
Max CVSS
975
New 30D
Vulnerabilities3,419In the news12Timeline
Severity mix
Critical 100High 390Medium 10Low 0
Severity
All severities500Critical100High390Medium10Low0
Exploitation
On CISA KEV63Exploited in the wild63
Watch

Add Windows 11 version 23H2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-38140
9.8
4%
Aug 13
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.4037
CVE-2024-38063
9.8
71%
Aug 13
Windows TCP/IP Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.4037
CVE-2024-38199
9.8
2%
Aug 13
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.4037
CVE-2024-30080
9.8
43%
Jun 11
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.3737; 10.0.22631.0 before 10.0.22631.3737
CVE-2023-36028
9.8
3%
Nov 14
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.2715
CVE-2023-36397
9.8
18%
Nov 14
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.2715
CVE-2026-42904
9.6
0%
Jun 9
Windows TCP/IP Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7219; 10.0.22631.0 before 10.0.22631.7219
CVE-2026-40402
9.3
0%
May 12
Windows Hyper-V Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7079; 10.0.22631.0 before 10.0.22631.7219
CVE-2026-45602
9.1
0%
Jun 9
Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7219; 10.0.22631.0 before 10.0.22631.7219
CVE-2025-50171
9.1
1%
Aug 12
Remote Desktop Spoofing Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.5768
CVE-2026-105008
9.0
1%
Oct 13
Windows Schannel Spoofing Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-85818
9.0
0%
Oct 13
Windows Schannel Spoofing Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-105007
8.8
1%
Oct 13
Windows NDIS Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-103575
8.8
1%
Oct 13
Remote Desktop Client Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-102225
8.8
1%
Oct 13
Windows Text Shaping Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-102217
8.8
1%
Oct 13
WebDAV Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-102214
8.8
0%
Oct 13
Windows Hyper-V Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-102203
8.8
1%
Oct 13
RPC Runtime Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-88219
8.8
1%
Oct 13
RPC Runtime Library Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-100220
8.8
1%
Oct 13
Windows Media Video Decoder Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-96952
8.8
1%
Oct 13
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-96917
8.8
0%
Oct 13
Windows PCI Bus Driver Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-96914
8.8
0%
Oct 13
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-88116
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-88114
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-88112
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-70158
8.8
1%
Oct 13
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-88142
8.8
1%
Oct 13
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-88121
8.8
1%
Oct 13
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83934
8.8
1%
Oct 13
Windows GDI+ Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83923
8.8
1%
Oct 13
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-85905
8.8
0%
Oct 13
Windows UI Immersive Server API Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-85903
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83889
8.8
1%
Oct 13
Windows DNS Server Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83874
8.8
1%
Oct 13
Windows Event Tracing Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83797
8.8
1%
Oct 13
Windows Partition Management Driver Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83777
8.8
1%
Oct 13
Windows Bluetooth Service Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83778
8.8
1%
Oct 13
Microsoft Internet Messaging API Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83771
8.8
1%
Oct 13
Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83728
8.8
0%
Oct 13
Windows Hyper-V Spoofing Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83725
8.8
1%
Oct 13
Microsoft Windows Search Component Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83716
8.8
0%
Oct 13
Windows Hyper-V Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-83643
8.8
1%
Oct 13
Windows Error Reporting Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-69326
8.8
1%
Oct 13
Graphic Fonts Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-77496
8.8
1%
Oct 13
Windows Imaging Component Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-70258
8.8
1%
Oct 13
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-69985
8.8
1%
Oct 13
Windows libarchive Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-70149
8.8
1%
Oct 13
Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-70068
8.8
1%
Oct 13
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
CVE-2026-88136
8.8
1%
Oct 13
Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability
Affected: 10.0.22631.0 before 10.0.22631.7652; 10.0.22631.0 before 10.0.22631.7652
Page 4 of 10 · 500 total
1…345…10
The 500 most important CVEs for this product (exploited first, then by severity)