Login Request a demo
W1
Product
Windows 11 23h2
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
2,978
CVEs
64
On KEV
9.9
Max CVSS
536
New 30D
Vulnerabilities2,978In the news12Timeline
Severity mix
Critical 80High 409Medium 11Low 0
Severity
All severities500Critical80High409Medium11Low0
Exploitation
On CISA KEV64Exploited in the wild64
Watch

Add Windows 11 23h2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-69325
8.1
1%
Sep 8
Microsoft JScript Remote Code Execution Vulnerability
Affected: before 10.0.22631.7582; before 10.0.22631.7582
CVE-2026-62781
8.1
1%
Aug 11
RPC Runtime Library Remote Code Execution Vulnerability
Affected: before 10.0.22631.7517; before 10.0.22631.7517
CVE-2026-61363
8.1
1%
Aug 11
Remote Desktop Client Remote Code Execution Vulnerability
Affected: before 10.0.22631.7517; before 10.0.22631.7517
CVE-2026-61352
8.1
0%
Aug 11
Remote Desktop Client Remote Code Execution Vulnerability
Affected: before 10.0.22631.7517; before 10.0.22631.7517
CVE-2026-62889
8.1
1%
Aug 11
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Affected: before 10.0.22631.7517; before 10.0.22631.7517
CVE-2026-62819
8.1
1%
Aug 11
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: before 10.0.22631.7517; before 10.0.22631.7517
CVE-2026-62792
8.1
1%
Aug 11
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.22631.7517; before 10.0.22631.7517
CVE-2026-59134
8.1
1%
Aug 11
Remote Desktop Client Remote Code Execution Vulnerability
Affected: before 10.0.22631.7517; before 10.0.22631.7517
CVE-2026-42974
8.1
1%
Jun 9
Windows Performance Monitor Remote Code Execution Vulnerability
Affected: before 10.0.22631.7219; before 10.0.22631.7219
CVE-2026-42981
8.1
1%
Jun 9
Windows Performance Monitor Remote Code Execution Vulnerability
Affected: before 10.0.22631.7219; before 10.0.22631.7219
CVE-2026-45635
8.1
1%
Jun 9
Windows UPnP Device Host Remote Code Execution Vulnerability
Affected: before 10.0.22631.7219; before 10.0.22631.7219
CVE-2026-45599
8.1
1%
Jun 9
Windows UPnP Device Host Remote Code Execution Vulnerability
Affected: before 10.0.22631.7219; before 10.0.22631.7219
CVE-2026-40415
8.1
1%
May 12
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.22631.7079; before 10.0.22631.7079
CVE-2026-33827
8.1
1%
Apr 14
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.22631.6936; before 10.0.22631.6936
CVE-2026-20856
8.1
1%
Jan 13
Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network
Affected: before 10.0.22631.6491
CVE-2025-50177
8.1
4%
Aug 12
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network
Affected: before 10.0.22631.5768
CVE-2025-33054
8.1
1%
Jul 8
Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoofing over a network
Affected: before 10.0.22631.5624
CVE-2025-33070
8.1
10%
Jun 10
Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network
Affected: before 10.0.22631.5472
CVE-2025-29828
8.1
1%
Jun 10
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network
Affected: before 10.0.22631.5472
CVE-2025-26670
8.1
11%
Apr 8
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network
Affected: before 10.0.22631.5189
CVE-2025-26663
8.1
2%
Apr 8
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network
Affected: before 10.0.22631.5189
CVE-2025-24035
8.1
2%
Mar 11
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network
Affected: before 10.0.22631.5039
CVE-2025-21376
8.1
9%
Feb 11
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.22631.4890
CVE-2025-21295
8.1
2%
Jan 14
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Affected: before 10.0.22631.4751
CVE-2025-21294
8.1
1%
Jan 14
Microsoft Digest Authentication Remote Code Execution Vulnerability
Affected: before 10.0.22631.4751
CVE-2025-21224
8.1
2%
Jan 14
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Affected: before 10.0.22631.4751
CVE-2024-49132
8.1
1%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.22631.4602
CVE-2024-49127
8.1
1%
Dec 12
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.22631.4602
CVE-2024-49126
8.1
1%
Dec 12
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
Affected: before 10.0.22631.4602
CVE-2024-49123
8.1
1%
Dec 12
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.22631.4602
CVE-2024-49122
8.1
21%
Dec 12
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: before 10.0.22631.4602
CVE-2024-43625
8.1
1%
Nov 12
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Affected: before 10.0.22631.4460; before 10.0.22631.4460
CVE-2024-43582
8.1
3%
Oct 8
Remote Desktop Protocol Server Remote Code Execution Vulnerability
Affected: before 10.0.22631.4317; before 10.0.22631.4317
CVE-2024-38045
8.1
1%
Sep 10
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.22631.4169; before 10.0.22631.4169
CVE-2024-38049
8.1
2%
Jul 9
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
Affected: before 10.0.22631.3880
CVE-2024-30020
8.1
1%
May 14
Windows Cryptographic Services Remote Code Execution Vulnerability
Affected: before 10.0.22631.3593
CVE-2024-21407
8.1
16%
Mar 12
Windows Hyper-V Remote Code Execution Vulnerability
Affected: before 10.0.22631.3296
CVE-2024-21357
8.1
27%
Feb 13
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Affected: before 10.0.22631.3155; before 10.0.22631.3155
CVE-2024-20652
8.1
2%
Jan 9
Windows HTML Platforms Security Feature Bypass Vulnerability
Affected: before 10.0.22631.3007; before 10.0.22631.3007
CVE-2023-36005
8.1
24%
Dec 12
Windows Telephony Server Elevation of Privilege Vulnerability
Affected: before 10.0.22631.2861
CVE-2023-35628
8.1
93%
Dec 12
Windows MSHTML Platform Remote Code Execution Vulnerability
Affected: before 10.0.22631.2861
CVE-2026-96844
8.0
1%
Oct 13
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Affected: before 10.0.22631.7652; before 10.0.22631.7652
CVE-2026-83838
8.0
1%
Oct 13
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
Affected: before 10.0.22631.7652; before 10.0.22631.7652
CVE-2026-69363
8.0
1%
Oct 13
Windows Error Reporting Elevation of Privilege Vulnerability
Affected: before 10.0.22631.7652; before 10.0.22631.7652
CVE-2026-69807
8.0
1%
Sep 8
PowerShell Elevation of Privilege Vulnerability
Affected: before 10.0.22631.7582; before 10.0.22631.7582
CVE-2026-69847
8.0
1%
Sep 8
Windows DHCP Server Remote Code Execution Vulnerability
Affected: before 10.0.22631.7582; before 10.0.22631.7582
CVE-2026-69773
8.0
1%
Sep 8
Windows Biometric Service Elevation of Privilege Vulnerability
Affected: before 10.0.22631.7582; before 10.0.22631.7582
CVE-2026-69826
8.0
1%
Sep 8
Windows Biometric Service Elevation of Privilege Vulnerability
Affected: before 10.0.22631.7582; before 10.0.22631.7582
CVE-2026-69727
8.0
1%
Sep 8
Windows Biometric Service Elevation of Privilege Vulnerability
Affected: before 10.0.22631.7582; before 10.0.22631.7582
CVE-2026-69643
8.0
1%
Sep 8
Windows Spaceport.sys Elevation of Privilege Vulnerability
Affected: before 10.0.22631.7582; before 10.0.22631.7582
Page 10 of 10 · 500 total
1…910
The 500 most important CVEs for this product (exploited first, then by severity)