# Microsoft Windows 11 version 23H2.

Every CVE that names Microsoft Windows 11 version 23H2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Error Reporting Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20817.md)
  `CVE-2026-20817` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-280
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20816.md)
  `CVE-2026-20816` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20814.md)
  `CVE-2026-20814` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [LDAP Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-20812.md)
  `CVE-2026-20812` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-20
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20811.md)
  `CVE-2026-20811` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Kernel Memory Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20809.md)
  `CVE-2026-20809` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption, Race condition
- [Desktop Window Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20805.md)
  `CVE-2026-20805` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Hello Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-20804.md)
  `CVE-2026-20804` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.7 High · Not analysed yet · Published 13 Jan 2026 · Tags: Privilege escalation
- [Secure Boot Certificate Expiration Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-21265.md)
  `CVE-2026-21265` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-1329
- [Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20962.md)
  `CVE-2026-20962` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62221.md)
  `CVE-2025-62221` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [PowerShell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-54100.md)
  `CVE-2025-54100` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Command injection
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-64680.md)
  `CVE-2025-64680` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-64679.md)
  `CVE-2025-64679` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-64678.md)
  `CVE-2025-64678` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-64661.md)
  `CVE-2025-64661` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Race condition
- [Windows File Explorer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62565.md)
  `CVE-2025-62565` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.3 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-62567.md)
  `CVE-2025-62567` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62474.md)
  `CVE-2025-62474` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Broken access control
- [Windows Defender Firewall Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-62468.md)
  `CVE-2025-62468` · CVE record: Microsoft Windows 11 version 22H3 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62467.md)
  `CVE-2025-62467` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption, CWE-126
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-55233.md)
  `CVE-2025-55233` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [DirectX Graphics Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-62465.md)
  `CVE-2025-62465` · CVE record: Microsoft Windows 11 version 22H3 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62464.md)
  `CVE-2025-62464` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-126
- [DirectX Graphics Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-62463.md)
  `CVE-2025-62463` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62462.md)
  `CVE-2025-62462` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-126
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62461.md)
  `CVE-2025-62461` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-126
- [Windows Storage VSP Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59517.md)
  `CVE-2025-59517` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Broken access control
- [Windows Storage VSP Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59516.md)
  `CVE-2025-59516` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Path traversal, Authentication bypass
- [Windows Storage VSP Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-64673.md)
  `CVE-2025-64673` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Broken access control
- [Windows DirectX Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-64670.md)
  `CVE-2025-64670` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: Information disclosure
- [Windows File Explorer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-64658.md)
  `CVE-2025-64658` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Dec 2025 · Tags: Race condition
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62573.md)
  `CVE-2025-62573` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Dec 2025 · Tags: Race condition, Memory corruption
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62571.md)
  `CVE-2025-62571` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-20
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-62549.md)
  `CVE-2025-62549` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-62473.md)
  `CVE-2025-62473` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-126
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62472.md)
  `CVE-2025-62472` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62470.md)
  `CVE-2025-62470` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Client-Side Caching Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62466.md)
  `CVE-2025-62466` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62458.md)
  `CVE-2025-62458` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62457.md)
  `CVE-2025-62457` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-62456.md)
  `CVE-2025-62456` · CVE record: Microsoft Windows 11 version 22H3 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62454.md)
  `CVE-2025-62454` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62213.md)
  `CVE-2025-62213` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62215.md)
  `CVE-2025-62215` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Nov 2025 · Tags: Race condition, Memory corruption
- [Windows License Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-62209.md)
  `CVE-2025-62209` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Information disclosure
- [Windows License Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-62208.md)
  `CVE-2025-62208` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Information disclosure
- [GDI+ Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-60724.md)
  `CVE-2025-60724` · CVE record: Microsoft Microsoft Office for Android and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [DirectX Graphics Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-60723.md)
  `CVE-2025-60723` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Race condition, Memory corruption
- [Windows Transport Driver Interface (TDI) Translation Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60720.md)
  `CVE-2025-60720` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-126
- [Windows Broadcast DVR User Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60717.md)
  `CVE-2025-60717` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60716.md)
  `CVE-2025-60716` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-60715.md)
  `CVE-2025-60715` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows OLE Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-60714.md)
  `CVE-2025-60714` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Windows Broadcast DVR User Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59515.md)
  `CVE-2025-59515` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59514.md)
  `CVE-2025-59514` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: Privilege escalation
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-62452.md)
  `CVE-2025-62452` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Memory corruption
- [Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62219.md)
  `CVE-2025-62219` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Race condition, Memory corruption
- [Microsoft Wireless Provisioning System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62218.md)
  `CVE-2025-62218` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-62217.md)
  `CVE-2025-62217` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Race condition

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-23h2.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-23h2.md?cursor=WyIyMDI1LTExLTExVDE3OjU5OjMxLjE4MDAwMFoiLCJDVkUtMjAyNS02MjIxNyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-11-version-23h2&cursor=WyIyMDI2LTAxLTEzVDE3OjU2OjE1LjE4MTAwMFoiLCJDVkUtMjAyNi0yMDgxOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-23h2/?cursor=WyIyMDI2LTAxLTEzVDE3OjU2OjE1LjE4MTAwMFoiLCJDVkUtMjAyNi0yMDgxOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.