# Microsoft Windows 11 version 23H2.

Every CVE that names Microsoft Windows 11 version 23H2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42837.md)
  `CVE-2026-42837` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42836.md)
  `CVE-2026-42836` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-50507.md)
  `CVE-2026-50507` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Authentication bypass
- [HTTP.sys Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-49160.md)
  `CVE-2026-49160` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.57 · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-405
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-48574.md)
  `CVE-2026-48574` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Boot Manager Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-47656.md)
  `CVE-2026-47656` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45658.md)
  `CVE-2026-45658` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45653.md)
  `CVE-2026-45653` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows DHCP Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45608.md)
  `CVE-2026-45608` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45637.md)
  `CVE-2026-45637` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45603.md)
  `CVE-2026-45603` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45638.md)
  `CVE-2026-45638` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows UPnP Device Host Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45635.md)
  `CVE-2026-45635` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-45602.md)
  `CVE-2026-45602` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-229, CWE-349
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45596.md)
  `CVE-2026-45596` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45636.md)
  `CVE-2026-45636` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption, CWE-20
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45598.md)
  `CVE-2026-45598` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45601.md)
  `CVE-2026-45601` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows UPnP Device Host Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45599.md)
  `CVE-2026-45599` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45597.md)
  `CVE-2026-45597` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45595.md)
  `CVE-2026-45595` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows Managed Installer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45604.md)
  `CVE-2026-45604` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Application Identity (AppID) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45594.md)
  `CVE-2026-45594` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows SDK Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45593.md)
  `CVE-2026-45593` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Internet (wininet.dll) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45592.md)
  `CVE-2026-45592` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45586.md)
  `CVE-2026-45586` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Path traversal
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42828.md)
  `CVE-2026-42828` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-126
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-48583.md)
  `CVE-2026-48583` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48578.md)
  `CVE-2026-48578` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48576.md)
  `CVE-2026-48576` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-1329
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48575.md)
  `CVE-2026-48575` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48573.md)
  `CVE-2026-48573` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-1329
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48570.md)
  `CVE-2026-48570` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48568.md)
  `CVE-2026-48568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-48563.md)
  `CVE-2026-48563` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47652.md)
  `CVE-2026-47652` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 8.2 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47653.md)
  `CVE-2026-47653` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-47648.md)
  `CVE-2026-47648` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-426
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45588.md)
  `CVE-2026-45588` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Microsoft Kinect Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41092.md)
  `CVE-2026-41092` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [HTTP.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47291.md)
  `CVE-2026-47291` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.25 · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47289.md)
  `CVE-2026-47289` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Kernel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45657.md)
  `CVE-2026-45657` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [UEFI Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45656.md)
  `CVE-2026-45656` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45655.md)
  `CVE-2026-45655` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-45642.md)
  `CVE-2026-45642` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-20
- [Windows DHCP Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45634.md)
  `CVE-2026-45634` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45641.md)
  `CVE-2026-45641` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 8.4 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45607.md)
  `CVE-2026-45607` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-45606.md)
  `CVE-2026-45606` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Bluetooth Port Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45640.md)
  `CVE-2026-45640` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45639.md)
  `CVE-2026-45639` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Bluetooth Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45605.md)
  `CVE-2026-45605` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45487.md)
  `CVE-2026-45487` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34335.md)
  `CVE-2026-34335` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33828.md)
  `CVE-2026-33828` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-501
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40404.md)
  `CVE-2026-40404` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption, CWE-197
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40409.md)
  `CVE-2026-40409` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-197
- [Windows DNS Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41108.md)
  `CVE-2026-41108` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-41097.md)
  `CVE-2026-41097` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 May 2026 · Tags: CWE-1329

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-23h2.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-23h2.md?cursor=WyIyMDI2LTA1LTEyVDE2OjU5OjMwLjY4MDAwMFoiLCJDVkUtMjAyNi00MTA5NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-11-version-23h2&cursor=WyIyMDI2LTA2LTA5VDE3OjA1OjU4LjQwMjAwMFoiLCJDVkUtMjAyNi00MjkwMyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-23h2/?cursor=WyIyMDI2LTA2LTA5VDE3OjA1OjU4LjQwMjAwMFoiLCJDVkUtMjAyNi00MjkwMyJd>. Everything for agents: <https://agentprime.io/llms.txt>.