Known vulnerabilities in Microsoft Windows 11 23H2 10.0.22631.4602 - page 72

Vendor: Microsoft
Software: Microsoft Windows
Version: 11 23H2 10.0.22631.4602
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1872
Public exploits: 42
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Windows version 11 23H2 10.0.22631.4602 Microsoft Windows 11 23H2 10.0.22631.4602 is affected by 1872 vulnerabilities: 5 critical, 256 high, 297 medium, 1313 low Critical High Medium Low

Vulnerabilities (1872)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115021 - Type confusion
CVE-2025-53810		 CWE-843 Low
No
No
 10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 09.09.2025 SB2025090962
#VU115017 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-54115		 CWE-362 Low
No
No
 10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 09.09.2025 SB2025090960
#VU115016 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55224		 CWE-362 Medium
No
No
 10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 09.09.2025 SB2025090960
#VU115015 - Integer overflow
CVE-2025-54091		 CWE-190 Low
No
No
 10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 09.09.2025 SB2025090960
#VU115014 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-54092		 CWE-362 Low
No
No
 10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 09.09.2025 SB2025090960
#VU115013 - Improper Access Control
CVE-2025-54098		 CWE-284 Low
No
No
 10 21H2 10.0.19044.6332, 10 22H2 10.0.19045.6332, 10 1507 10.0.10240.21128, 10 1607 10.0.14393.8422, 10 1809 10.0.17763.7792, 11 22H2 10.0.22621.5909, 11 23H2 10.0.22631.5909, 11 24H2 10.0.26100.6508, 11 24H2 10.0.26100.6584 09.09.2025 SB2025090960
#VU114365 - Improper Verification of Cryptographic Signature
CVE-2025-55229		 CWE-347 Medium
No
No
 10 21H2 10.0.19044.6321, 10 22H2 10.0.19045.6321, 10 1507 10.0.10240.21122, 10 1607 10.0.14393.8416, 10 1809 10.0.17763.7783, 11 22H2 10.0.22621.5900, 11 23H2 10.0.22631.5900, 11 24H2 10.0.26100.6563 22.08.2025 SB2025082209
#VU114363 - Untrusted Pointer Dereference
CVE-2025-55230		 CWE-822 Low
No
No
 10 21H2 10.0.19044.6321, 10 22H2 10.0.19045.6321, 10 1507 10.0.10240.21122, 10 1607 10.0.14393.8416, 10 1809 10.0.17763.7783, 11 22H2 10.0.22621.5900, 11 23H2 10.0.22631.5900, 11 24H2 10.0.26100.6563 22.08.2025 SB2025082208
#VU114051 - Missing Authentication for Critical Function
CVE-2025-53789		 CWE-306 Low
No
No
 10 21H2 10.0.19044.6093, 10 1507 10.0.10240.21073, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 13.08.2025 SB20250813100
#VU114035 - Permissions, Privileges, and Access Controls
CVE-2025-50170		 CWE-264 Low
No
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081387
#VU114027 - Exposure of sensitive information to an unauthorized actor
CVE-2025-53136		 CWE-200 Low
Public exploit available
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081381
#VU114011 - Use After Free
CVE-2025-53151		 CWE-416 Low
No
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081358
#VU114010 - Use After Free
CVE-2025-49761		 CWE-416 Low
No
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081358
#VU114007 - Heap-based Buffer Overflow
CVE-2025-53766		 CWE-122 High
No
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081355
#VU114003 - Improper Authentication
CVE-2025-53778		 CWE-287 Medium
No
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081351
#VU114002 - Resource exhaustion
CVE-2025-53722		 CWE-400 Medium
No
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081350
#VU114001 - Heap-based Buffer Overflow
CVE-2025-53131		 CWE-122 High
No
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081346
#VU113999 - Exposure of sensitive information to an unauthorized actor
CVE-2025-50154		 CWE-200 Medium
Public exploit available
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081340
#VU113997 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-50158		 CWE-367 Low
No
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081335
#VU113993 - Use After Free
CVE-2025-50159		 CWE-416 Low
No
No
 10 21H2 10.0.19044.6216, 10 22H2 10.0.19045.6216, 10 1507 10.0.10240.21100, 10 1607 10.0.14393.8330, 10 1809 10.0.17763.7678, 11 22H2 10.0.22621.5768, 11 23H2 10.0.22631.5768, 11 24H2 10.0.26100.4851, 11 24H2 10.0.26100.4946 13.08.2025 SB2025081327


Showing elements 1421 - 1440 out of 1872