Known vulnerabilities in Microsoft Windows 11 23H2 10.0.22631.4602 - page 61

Vendor: Microsoft
Software: Microsoft Windows
Version: 11 23H2 10.0.22631.4602
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1872
Public exploits: 42
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Windows version 11 23H2 10.0.22631.4602 Microsoft Windows 11 23H2 10.0.22631.4602 is affected by 1872 vulnerabilities: 5 critical, 256 high, 297 medium, 1313 low Critical High Medium Low

Vulnerabilities (1872)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121236 - Use After Free
CVE-2026-20920		 CWE-416 Low
No
No
 10 1607 10.0.14393.8783, 11 23H2 10.0.22631.6491 13.01.2026 SB2026011373
#VU121234 - Type confusion
CVE-2026-20860		 CWE-843 Low
No
No
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011372
#VU121233 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-20831		 CWE-367 Low
No
No
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011372
#VU121231 - Improper Access Control
CVE-2026-20929		 CWE-284 Medium
Public exploit available
Exploited
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.3223 13.01.2026 SB2026011371
#VU121230 - Exposure of sensitive information to an unauthorized actor
CVE-2026-20805		 CWE-200 High
No
Exploited
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1607 10.0.14393.8783, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011370
#VU121228 - Use of Uninitialized Resource
CVE-2026-20962		 CWE-908 Low
No
No
 10 21H2 10.0.19044.6809, 10 22H2 10.0.19045.6809, 10 1809 10.0.17763.8276, 11 23H2 10.0.22631.6491, 11 24H2 10.0.26100.7456, 11 24H2 10.0.26100.7623 13.01.2026 SB2026011368
#VU119496 - Command injection
CVE-2025-54100		 CWE-77 High
Public exploit available
No
 10 21H2 10.0.19043.6456, 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7456, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120994
#VU119483 - Heap-based Buffer Overflow
CVE-2025-62456		 CWE-122 Medium
No
No
 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120985
#VU119481 - Heap-based Buffer Overflow
CVE-2025-62454		 CWE-122 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462, 11 25H2 10.0.26200.7092 09.12.2025 SB2025120984
#VU119480 - Out-of-bounds read
CVE-2025-62457		 CWE-125 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120984
#VU119479 - Improper input validation
CVE-2025-62571		 CWE-20 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120982
#VU119477 - Out-of-bounds read
CVE-2025-62462		 CWE-125 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120980
#VU119476 - Out-of-bounds read
CVE-2025-62461		 CWE-125 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120980
#VU119474 - Integer underflow
CVE-2025-62567		 CWE-191 Medium
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120978
#VU119473 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-64661		 CWE-362 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120977
#VU119471 - Heap-based Buffer Overflow
CVE-2025-64679		 CWE-122 Low
No
No
 10 21H2 10.0.19043.6456, 10 21H2 10.0.19043.6575, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 09.12.2025 SB2025120975
#VU119470 - Heap-based Buffer Overflow
CVE-2025-64680		 CWE-122 Low
No
No
 10 21H2 10.0.19043.6456, 10 22H2 10.0.19045.6456, 10 1507 10.0.10240.21161, 10 1607 10.0.14393.8519, 10 1809 10.0.17763.7919, 11 22H2 10.0.22621.6060, 11 23H2 10.0.22631.6060, 11 24H2 10.0.26100.6899 09.12.2025 SB2025120975
#VU119469 - Missing Authentication for Critical Function
CVE-2025-59516		 CWE-306 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119468 - Improper Access Control
CVE-2025-59517		 CWE-284 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974
#VU119467 - Improper Access Control
CVE-2025-64673		 CWE-284 Low
No
No
 10 21H2 10.0.19044.6691, 10 22H2 10.0.19045.6691, 10 1607 10.0.14393.8688, 10 1809 10.0.17763.8146, 11 23H2 10.0.22631.6345, 11 24H2 10.0.26100.7392, 11 24H2 10.0.26100.7462 09.12.2025 SB2025120974


Showing elements 1201 - 1220 out of 1872