Microsoft Corp Windows 11 23H2

Name: Microsoft Corp Windows 11 23H2
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

40critical225high42medium2low

updated 2026-10-27

vulnerabilities (1,944)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21412US	—OT critical	99.4% (100th)	KEV	no fix	2024-02-13	—
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	no fix	2023-11-14	—
CVE-2025-33053US	—OT critical	87.0% (100th)	KEV	no fix	2025-06-10	—
CVE-2024-43451US	—OT critical	84.3% (100th)	KEV	no fix	2024-11-12	—
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	no fix	2024-07-09	—
CVE-2025-33073US	—OT critical	82.7% (100th)	KEV	no fix	2025-06-10	—
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	≤ 10.0.22631.6936
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	≤ 10.0.22631.6936
CVE-2024-30088US	—OT critical	68.2% (99th)	KEV	no fix	2024-06-11	—
CVE-2025-24054US	medium5.4OT critical	62.3% (99th)	KEV	no fix	2025-03-11	—
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	≤ 10.0.22631.6649
CVE-2024-21338US	—OT critical	59.8% (99th)	KEV	no fix	2024-02-13	—
CVE-2024-29988US	—OT critical	45.2% (99th)	KEV	no fix	2024-04-09	—
CVE-2025-26633US	—OT critical	30.4% (98th)	KEV	no fix	2025-03-11	—
CVE-2024-38193US	—OT critical	28.7% (98th)	KEV	no fix	2024-08-13	—
CVE-2025-30397US	—OT critical	27.3% (98th)	KEV	no fix	2025-05-13	—
CVE-2024-49138US	—OT critical	26.2% (98th)	KEV	no fix	2024-12-12	—
CVE-2024-35250US	—OT critical	25.2% (98th)	KEV	no fix	2024-06-11	—
CVE-2025-29824US	—OT critical	19.3% (97th)	KEV	no fix	2025-04-08	—
CVE-2024-49039US	—OT critical	14.2% (97th)	KEV	no fix	2024-11-12	—
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	no fix	2023-11-14	—
CVE-2025-21333US	—OT critical	10.1% (96th)	KEV	no fix	2025-01-14	—
CVE-2026-20805US	—OT critical	7.46% (94th)	KEV	no fix	2026-01-13	≤ 10.0.22631.6491
CVE-2024-38080US	—OT critical	7.12% (94th)	KEV	no fix	2024-07-09	—
CVE-2025-24990US	—OT critical	6.37% (94th)	KEV	no fix	2025-10-14	≤ 10.0.22631.6060
CVE-2024-30051US	—OT critical	5.69% (93rd)	KEV	no fix	2024-05-14	—
CVE-2025-47827US	—OT critical	4.93% (92nd)	KEV	no fix	2025-06-05	≤ 10.0.22631.6060
CVE-2025-62215US	—OT critical	4.46% (91st)	KEV	no fix	2025-11-11	≤ 10.0.22631.6199
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	no fix	2026-02-10	≤ 10.0.22631.6649
CVE-2024-26169US	—OT critical	3.98% (90th)	KEV	no fix	2024-03-12	—
CVE-2025-24985US	—OT critical	3.89% (90th)	KEV	no fix	2025-03-11	—
CVE-2025-62221US	—OT critical	2.50% (85th)	KEV	no fix	2025-12-09	≤ 10.0.22631.6345
CVE-2025-30400US	—OT critical	1.92% (80th)	KEV	no fix	2025-05-13	—
CVE-2025-32709US	—OT critical	1.82% (79th)	KEV	no fix	2025-05-13	—
CVE-2026-81963US	high7.8OT critical	0.39% (33rd)	KEV	no fix	2026-09-08	≤ 10.0.22631.7582
CVE-2026-68820US	—OT critical	0.33% (26th)	KEV	no fix	2026-08-11	≤ 10.0.22631.7517
CVE-2024-43572US	—OT critical	66.7% (99th)	KEV	no fix	2024-10-08	—
CVE-2024-43461US	—OT critical	54.5% (99th)	KEV	no fix	2024-09-10	—
CVE-2024-43573US	high8.1OT critical	46.1% (99th)	KEV	no fix	2024-10-08	—
CVE-2024-38178US	—OT critical	41.4% (99th)	KEV	no fix	2024-08-13	—
CVE-2024-21351US	—OT critical	27.8% (98th)	KEV	no fix	2024-02-13	—
CVE-2023-36036US	high7.8OT critical	16.7% (97th)	KEV	no fix	2023-11-14	—
CVE-2026-21513US	—OT critical	15.9% (97th)	KEV	no fix	2026-02-10	≤ 10.0.22631.6649
CVE-2024-38213US	—OT critical	13.6% (96th)	KEV	no fix	2024-08-13	—
CVE-2023-36033US	high7.8OT critical	10.9% (96th)	KEV	no fix	2023-11-14	—
CVE-2024-38217US	—OT critical	10.0% (96th)	KEV	no fix	2024-09-10	—
CVE-2026-96951US	high8.8OT critical	9.81% (96th)	KEV	no fix	2026-10-13	≤ 10.0.22631.7652
CVE-2024-38106US	—OT critical	6.34% (94th)	KEV	no fix	2024-08-13	—
CVE-2024-38014US	—OT critical	6.26% (94th)	KEV	no fix	2024-09-10	—
CVE-2026-21525US	—OT critical	4.87% (92nd)	KEV	no fix	2026-02-10	≤ 10.0.22631.6649

showing 50 of 1,944

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow404 CVEs
CWE-416Use After Free363 CVEs
CWE-125Out-of-bounds Read207 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')171 CVEs
CWE-20Improper Input Validation143 CVEs
CWE-190Integer Overflow or Wraparound88 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor71 CVEs
CWE-284Improper Access Control67 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)1,939 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan