microsoft / windows_11_23h2
761 known vulnerabilities in microsoft windows_11_23h2.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-69552 | Low | 0.9% | 5.7 | Generation of error message containing sensitive information in Windows Print Sp… | |
| CVE-2026-69572 | Low | 0.9% | 5.7 | Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclo… | |
| CVE-2026-20824 | Low | 0.9% | 5.5 | Protection mechanism failure in Windows Remote Assistance allows an unauthorized… | |
| CVE-2026-61918 | Low | 0.9% | 6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to d… | |
| CVE-2026-62782 | Low | 0.9% | 6.5 | Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disc… | |
| CVE-2026-69569 | Low | 0.9% | 5.7 | Untrusted pointer dereference in Windows Print Spooler Components allows an auth… | |
| CVE-2026-68874 | Low | 0.8% | 5.7 | Out-of-bounds read in Windows Program Compatibility Assistant Service allows an … | |
| CVE-2026-69349 | Low | 0.8% | 5.7 | Use of uninitialized resource in Windows Management Instrumentation allows an au… | |
| CVE-2026-69507 | Low | 0.8% | 5.7 | Insertion of sensitive information into externally-accessible file or directory … | |
| CVE-2026-61921 | Low | 0.8% | 6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to d… | |
| CVE-2026-61924 | Low | 0.8% | 6.5 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to d… | |
| CVE-2026-42907 | Low | 0.8% | 6.5 | Exposure of sensitive information to an unauthorized actor in Windows Shell allo… | |
| CVE-2026-42914 | Low | 0.8% | 5.3 | Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny ser… | |
| CVE-2024-21340 | Low | 0.8% | 4.6 | Windows Kernel Information Disclosure Vulnerability | |
| CVE-2026-20834 | Low | 0.8% | 4.6 | Absolute path traversal in Windows Shell allows an unauthorized attacker to perf… | |
| CVE-2026-73019 | Low | 0.7% | 4.3 | Improper resolution of path equivalence in Windows URL Moniker allows an unautho… | |
| CVE-2024-38254 | Low | 0.7% | 5.5 | Windows Authentication Information Disclosure Vulnerability | |
| CVE-2024-38235 | Low | 0.7% | 6.5 | Windows Hyper-V Denial of Service Vulnerability | |
| CVE-2026-20821 | Low | 0.7% | 6.2 | Exposure of sensitive information to an unauthorized actor in Windows Remote Pro… | |
| CVE-2026-20932 | Low | 0.7% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows File Explo… | |
| CVE-2026-20823 | Low | 0.7% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows File Explo… | |
| CVE-2026-20827 | Low | 0.7% | 5.5 | Exposure of sensitive information to an unauthorized actor in Tablet Windows Use… | |
| CVE-2026-20838 | Low | 0.7% | 5.5 | Generation of error message containing sensitive information in Windows Kernel a… | |
| CVE-2026-20828 | Low | 0.7% | 4.6 | Out-of-bounds read in Windows Internet Connection Sharing (ICS) allows an unauth… | |
| CVE-2026-65794 | Low | 0.7% | 6.5 | Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclo… | |
| CVE-2024-21377 | Low | 0.6% | 5.5 | Windows DNS Information Disclosure Vulnerability | |
| CVE-2026-20862 | Low | 0.6% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows Management… | |
| CVE-2026-78446 | Low | 0.6% | 5.3 | Use after free in Windows Distributed File System (DFS) allows an authorized att… | |
| CVE-2026-68898 | Low | 0.6% | 6.5 | Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny serv… | |
| CVE-2026-62750 | Low | 0.6% | 6.5 | Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized … | |
| CVE-2026-20829 | Low | 0.6% | 5.5 | Out-of-bounds read in Windows TPM allows an authorized attacker to disclose info… | |
| CVE-2024-21339 | Low | 0.6% | 6.4 | Windows USB Generic Parent Driver Remote Code Execution Vulnerability | |
| CVE-2026-20819 | Low | 0.6% | 5.5 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enc… | |
| CVE-2026-50659 | Low | 0.6% | 6.5 | Improper encoding or escaping of output in .NET allows an authorized attacker to… | |
| CVE-2026-20825 | Low | 0.5% | 4.4 | Improper access control in Windows Hyper-V allows an authorized attacker to disc… | |
| CVE-2026-62801 | Low | 0.5% | 6.5 | Improper limitation of a pathname to a restricted directory ('path traversal') i… | |
| CVE-2026-20876 | Low | 0.5% | 6.7 | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclav… | |
| CVE-2026-20939 | Low | 0.5% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows File Explo… | |
| CVE-2026-20937 | Low | 0.5% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows File Explo… | |
| CVE-2026-78455 | Low | 0.5% | 4.3 | Out-of-bounds read in Xbox allows an unauthorized attacker to disclose informati… | |
| CVE-2026-78516 | Low | 0.5% | 4.3 | Buffer over-read in Windows Storage allows an unauthorized attacker to disclose … | |
| CVE-2026-69406 | Low | 0.5% | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Wi… | |
| CVE-2026-20839 | Low | 0.5% | 5.5 | Improper access control in Windows Client-Side Caching (CSC) Service allows an a… | |
| CVE-2024-21304 | Low | 0.5% | 4.1 | Trusted Compute Base Elevation of Privilege Vulnerability | |
| CVE-2026-20936 | Low | 0.5% | 4.3 | Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose inf… | |
| CVE-2026-33842 | Low | 0.5% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows File Explo… | |
| CVE-2026-34328 | Low | 0.5% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows Audio Serv… | |
| CVE-2026-78452 | Low | 0.5% | 4.6 | Out-of-bounds read in Microsoft Windows SCSI Class System File allows an unautho… | |
| CVE-2026-42971 | Low | 0.5% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows Push Notif… | |
| CVE-2026-42972 | Low | 0.5% | 5.5 | Exposure of sensitive information to an unauthorized actor in Windows Hyper-V al… |