Known vulnerabilities in Microsoft Windows 11 23H2 10.0.22631.4602 - page 55

Vendor: Microsoft
Software: Microsoft Windows
Version: 11 23H2 10.0.22631.4602
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1872
Public exploits: 42
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Windows version 11 23H2 10.0.22631.4602 Microsoft Windows 11 23H2 10.0.22631.4602 is affected by 1872 vulnerabilities: 5 critical, 256 high, 297 medium, 1313 low Critical High Medium Low

Vulnerabilities (1872)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123745 - Use After Free
CVE-2026-24289		 CWE-416 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310104
#VU123744 - External Control of File Name or Path
CVE-2026-24287		 CWE-73 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310104
#VU123742 - Improper Restriction of Names for Files and Other Resources
CVE-2026-25177		 CWE-641 Medium
Public exploit available
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310103
#VU123740 - Out-of-bounds read
CVE-2026-24282		 CWE-125 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310101
#VU123736 - Use After Free
CVE-2026-24285		 CWE-416 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031098
#VU123734 - Improper Access Control
CVE-2026-24290		 CWE-284 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031096
#VU123733 - Use After Free
CVE-2026-24292		 CWE-416 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031095
#VU123732 - Out-of-bounds read
CVE-2026-23673		 CWE-125 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031094
#VU123731 - Improper Resolution of Path Equivalence
CVE-2026-23674		 CWE-41 Medium
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031093
#VU123711 - Out-of-bounds read
CVE-2026-25180		 CWE-125 Medium
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031073
#VU123710 - NULL Pointer Dereference
CVE-2026-25168		 CWE-476 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031073
#VU123709 - Divide By Zero
CVE-2026-25169		 CWE-369 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031073
#VU123708 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23668		 CWE-362 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979 10.03.2026 SB2026031073
#VU123707 - Out-of-bounds read
CVE-2026-25181		 CWE-125 Medium
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031072
#VU123703 - Incorrect Permission Assignment for Critical Resource
CVE-2026-24291		 CWE-732 Low
Public exploit available
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031068
#VU123702 - Exposure of sensitive information to an unauthorized actor
CVE-2026-25186		 CWE-200 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031068
#VU123700 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-25187		 CWE-59 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031066
#VU123699 - Heap-based Buffer Overflow
CVE-2026-25188		 CWE-122 Medium
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031065
#VU123692 - Improper Authentication
CVE-2026-24294		 CWE-287 Low
No
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031060
#VU123691 - Improper Authentication
CVE-2026-26128		 CWE-287 Low
Public exploit available
No
 10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB2026031060


Showing elements 1081 - 1100 out of 1872