W1
Product
Windows 11 23h2
On CISA KEVExploited in the wildRansomware-linked
2,978
CVEs
64
On KEV
9.9
Max CVSS
536
New 30D
Severity mix
Critical 80High 409Medium 11Low 0
Watch
Add Windows 11 23h2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-96951 In wildKEV | 8.8 | Oct 13 | Windows Shell Security Feature Bypass Vulnerability Affected: before 10.0.22631.7652; before 10.0.22631.7652 |
| CVE-2026-21510 In wildKEV | 8.8 | Feb 10 | Windows Shell Security Feature Bypass Vulnerability Affected: before 10.0.22631.6649; before 10.0.22631.6649 |
| CVE-2026-21513 In wildKEV | 8.8 | Feb 10 | MSHTML Framework Security Feature Bypass Vulnerability Affected: before 10.0.22631.6649; before 10.0.22631.6649 |
| CVE-2025-33073 In wildKEV | 8.8 | Jun 10 | Windows SMB Client Elevation of Privilege Vulnerability Affected: before 10.0.22631.5472 |
| CVE-2025-33053 In wildKEV | 8.8 | Jun 10 | Internet Shortcut Files Remote Code Execution Vulnerability Affected: before 10.0.22631.5472; before 10.0.22631.5472 |
| CVE-2024-49039 RansomwareIn wildKEV | 8.8 | Nov 12 | Windows Task Scheduler Elevation of Privilege Vulnerability Affected: before 10.0.22631.4460; before 10.0.22631.4460 |
| CVE-2024-43461 In wildKEV | 8.8 | Sep 10 | Windows MSHTML Platform Spoofing Vulnerability Affected: before 10.0.22621.4169; before 10.0.22631.4169 |
| CVE-2024-30040 In wildKEV | 8.8 | May 14 | Windows MSHTML Platform Security Feature Bypass Vulnerability Affected: before 10.0.22631.3593 |
| CVE-2024-29988 In wildKEV | 8.8 | Apr 9 | SmartScreen Prompt Security Feature Bypass Vulnerability Affected: before 10.0.22631.3447 |
| CVE-2023-36025 In wildKEV | 8.8 | Nov 14 | Windows SmartScreen Security Feature Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2024-43573 In wildKEV | 8.1 | Oct 8 | Windows MSHTML Platform Spoofing Vulnerability Affected: before 10.0.22631.4317; before 10.0.22631.4317 |
| CVE-2024-21412 RansomwareIn wildKEV | 8.1 | Feb 13 | Internet Shortcut Files Security Feature Bypass Vulnerability Affected: before 10.0.22631.3155 |
| CVE-2026-81963 In wildKEV | 7.8 | Sep 8 | Windows Update Stack Elevation of Privilege Vulnerability Affected: before 10.0.22631.7582; before 10.0.22631.7582 |
| CVE-2026-21533 In wildKEV | 7.8 | Feb 10 | Windows Remote Desktop Services Elevation of Privilege Vulnerability Affected: before 10.0.22631.6649; before 10.0.22631.6649 |
| CVE-2026-21519 In wildKEV | 7.8 | Feb 10 | Desktop Window Manager Elevation of Privilege Vulnerability Affected: before 10.0.22631.6649; before 10.0.22631.6649 |
| CVE-2025-62221 In wildKEV | 7.8 | Dec 9 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: before 10.0.22631.6345 |
| CVE-2025-59230 In wildKEV | 7.8 | Oct 14 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Affected: through 10.0.22631.6060 |
| CVE-2025-24990 In wildKEV | 7.8 | Oct 14 | Windows Agere Modem Driver Elevation of Privilege Vulnerability Affected: through 10.0.22631.6060 |
| CVE-2025-32709 In wildKEV | 7.8 | May 13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.22631.5335 |
| CVE-2025-32706 In wildKEV | 7.8 | May 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: before 10.0.22631.5335 |
| CVE-2025-32701 In wildKEV | 7.8 | May 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: before 10.0.22631.5335 |
| CVE-2025-30400 In wildKEV | 7.8 | May 13 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.22631.5335 |
| CVE-2025-29824 RansomwareIn wildKEV | 7.8 | Apr 8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: before 10.0.22631.5189; before 10.0.22631.5189 |
| CVE-2025-24993 In wildKEV | 7.8 | Mar 11 | Windows NTFS Remote Code Execution Vulnerability Affected: before 10.0.22631.5039; before 10.0.22631.5039 |
| CVE-2025-24985 In wildKEV | 7.8 | Mar 11 | Windows Fast FAT File System Driver Remote Code Execution Vulnerability Affected: before 10.0.22631.5039 |
| CVE-2025-21418 In wildKEV | 7.8 | Feb 11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.22631.4890 |
| CVE-2025-21334 In wildKEV | 7.8 | Jan 14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Affected: before 10.0.22631.4751; before 10.0.22631.4751 |
| CVE-2025-21333 In wildKEV | 7.8 | Jan 14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Affected: before 10.0.22631.4751 |
| CVE-2025-21335 In wildKEV | 7.8 | Jan 14 | Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Affected: before 10.0.22631.4751; before 10.0.22631.4751 |
| CVE-2024-49138 In wildKEV | 7.8 | Dec 10 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: before 10.0.22631.4602; before 10.0.22631.4602 |
| CVE-2024-43572 In wildKEV | 7.8 | Oct 8 | Microsoft Management Console Remote Code Execution Vulnerability Affected: before 10.0.22631.4317; before 10.0.22631.4317 |
| CVE-2024-38014 In wildKEV | 7.8 | Sep 10 | Windows Installer Elevation of Privilege Vulnerability Affected: before 10.0.22631.4169 |
| CVE-2024-38107 In wildKEV | 7.8 | Aug 13 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability Affected: before 10.0.22631.4037 |
| CVE-2024-38193 In wildKEV | 7.8 | Aug 13 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.22631.4037 |
| CVE-2024-38080 In wildKEV | 7.8 | Jul 9 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: before 10.0.22631.3880 |
| CVE-2024-35250 In wildKEV | 7.8 | Jun 11 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Affected: before 10.0.22631.3737 |
| CVE-2024-30051 RansomwareIn wildKEV | 7.8 | May 14 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.22631.3593 |
| CVE-2024-26169 RansomwareIn wildKEV | 7.8 | Mar 12 | Windows Error Reporting Service Elevation of Privilege Vulnerability Affected: before 10.0.22631.3296 |
| CVE-2024-21338 RansomwareIn wildKEV | 7.8 | Feb 13 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.22631.3155 |
| CVE-2023-36033 In wildKEV | 7.8 | Nov 14 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: before 10.0.22621.2715; before 10.0.22621.2715 |
| CVE-2023-36036 In wildKEV | 7.8 | Nov 14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: before 10.0.22621.2715; before 10.0.22621.2715 |
| CVE-2023-36424 In wildKEV | 7.8 | Nov 14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: before 10.0.22631.2715 |
| CVE-2024-21351 In wildKEV | 7.6 | Feb 13 | Windows SmartScreen Security Feature Bypass Vulnerability Affected: before 10.0.22631.3155 |
| CVE-2025-30397 In wildKEV | 7.5 | May 13 | Scripting Engine Memory Corruption Vulnerability Affected: before 10.0.22631.5335 |
| CVE-2024-38178 In wildKEV | 7.5 | Aug 13 | Scripting Engine Memory Corruption Vulnerability Affected: before 10.0.22631.4037 |
| CVE-2024-38112 In wildKEV | 7.5 | Jul 9 | Windows MSHTML Platform Spoofing Vulnerability Affected: before 10.0.22631.3880 |
| CVE-2025-21391 In wildKEV | 7.1 | Feb 11 | Windows Storage Elevation of Privilege Vulnerability Affected: before 10.0.22631.4890 |
| CVE-2026-68820 In wildKEV | 7.0 | Aug 11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.22631.7517 |
| CVE-2025-62215 In wildKEV | 7.0 | Nov 11 | Windows Kernel Elevation of Privilege Vulnerability Affected: before 10.0.22631.6199 |
| CVE-2025-26633 RansomwareIn wildKEV | 7.0 | Mar 11 | Microsoft Management Console Security Feature Bypass Vulnerability Affected: before 10.0.22631.5039; before 10.0.22631.5039 |
The 500 most important CVEs for this product (exploited first, then by severity)