Known vulnerabilities in Microsoft Windows 11 23H2 10.0.22631.4602 - page 75

Vendor: Microsoft
Software: Microsoft Windows
Version: 11 23H2 10.0.22631.4602
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1872
Public exploits: 42
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Windows version 11 23H2 10.0.22631.4602 Microsoft Windows 11 23H2 10.0.22631.4602 is affected by 1872 vulnerabilities: 5 critical, 256 high, 297 medium, 1313 low Critical High Medium Low

Vulnerabilities (1872)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112699 - Insufficient UI Warning of Dangerous Operations
CVE-2025-33054		 CWE-357 High
No
No
 10 1607 10.0.14393.8246, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709115
#VU112689 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-49690		 CWE-362 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709108
#VU112675 - Heap-based Buffer Overflow
CVE-2025-47981		 CWE-122 High
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709101
#VU112662 - Missing Authentication for Critical Function
CVE-2025-48814		 CWE-306 Medium
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB20250709100
#VU112658 - Exposure of sensitive information to an unauthorized actor
CVE-2025-48808		 CWE-200 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070998
#VU112647 - Integer overflow
CVE-2025-48816		 CWE-190 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070995
#VU112645 - NULL Pointer Dereference
CVE-2025-49686		 CWE-476 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070993
#VU112641 - Protection Mechanism Failure
CVE-2025-48003		 CWE-693 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070992
#VU112640 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-48001		 CWE-367 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070992
#VU112636 - Protection Mechanism Failure
CVE-2025-48800		 CWE-693 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070992
#VU112635 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-48818		 CWE-367 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070992
#VU112634 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-48804		 CWE-349 Low
Public exploit available
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070992
#VU112633 - Missing Authorization
CVE-2025-49723		 CWE-862 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070988
#VU112632 - Use After Free
CVE-2025-48821		 CWE-416 Medium
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070981
#VU112631 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-48819		 CWE-591 Medium
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070981
#VU112602 - Resource exhaustion
CVE-2025-49722		 CWE-400 Medium
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070953
#VU112601 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-48820		 CWE-59 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070952
#VU112599 - Improper input validation
CVE-2025-47982		 CWE-20 Low
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070951
#VU112598 - Improper Certificate Validation
CVE-2025-48802		 CWE-295 Medium
No
No
 10 1607 10.0.14393.8246, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624 09.07.2025 SB2025070949
#VU112596 - Exposure of sensitive information to an unauthorized actor
CVE-2025-48823		 CWE-200 Medium
No
No
 10 21H2 10.0.19044.6093, 10 22H2 10.0.19045.6093, 10 1507 10.0.10240.21073, 10 1607 10.0.14393.8246, 10 1809 10.0.17763.7558, 11 22H2 10.0.22621.5624, 11 23H2 10.0.22631.5624, 11 24H2 10.0.26100.4652 09.07.2025 SB2025070947


Showing elements 1481 - 1500 out of 1872