Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 23H2

Is your version affected?

CVE Summary Score Published
CVE-2025-58716 Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally 8.8 High Oct 14, 2025
CVE-2025-58715 Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally 8.8 High Oct 14, 2025
CVE-2025-55701 Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate… 7.8 High Oct 14, 2025
CVE-2025-55700 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Oct 14, 2025
CVE-2025-55687 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File… 7.4 High Oct 14, 2025
CVE-2025-55689 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally 7.0 High Oct 14, 2025
CVE-2025-55686 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally 7.0 High Oct 14, 2025
CVE-2025-55685 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally 7.0 High Oct 14, 2025
CVE-2025-55681 Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally 7.0 High Oct 14, 2025
CVE-2025-55340 Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature… 7.0 High Oct 14, 2025
CVE-2025-55339 Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-55338 Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with… 6.1 Medium Oct 14, 2025
CVE-2025-55336 Exposure of sensitive information to an unauthorized actor in Windows Cloud Files Mini Filter Driver allows an… 5.5 Medium Oct 14, 2025
CVE-2025-55335 Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally 7.4 High Oct 14, 2025
CVE-2025-55333 Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security… 6.1 Medium Oct 14, 2025
CVE-2025-55325 Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally 5.5 Medium Oct 14, 2025
CVE-2025-24052 Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows… 7.8 High Oct 14, 2025
CVE-2025-24990 Exploited Microsoft Windows Untrusted Pointer Dereference Vulnerability 7.8 High Oct 14, 2025
CVE-2025-48004 Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally 7.4 High Oct 14, 2025
CVE-2025-59220 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service… 7.0 High Sep 18, 2025
CVE-2025-55234 SMB Server might be susceptible to relay attacks depending on the configuration 8.8 High Sep 9, 2025
CVE-2025-55224 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX… 7.8 High Sep 9, 2025
CVE-2025-54917 Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a… 4.3 Medium Sep 9, 2025
CVE-2025-54915 Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an… 6.7 Medium Sep 9, 2025
CVE-2025-54912 Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally 7.8 High Sep 9, 2025

Other Microsoft products