Microsoft

Windows 11 23h2

1186 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8

CVE-2025-62452

  • EPSS 0.06%
  • Published 11.11.2025 18:15:50
  • Last modified 14.11.2025 15:41:32

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

7

CVE-2025-62217

  • EPSS 0.04%
  • Published 11.11.2025 18:15:49
  • Last modified 14.11.2025 15:56:13

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

7

CVE-2025-62218

  • EPSS 0.04%
  • Published 11.11.2025 18:15:49
  • Last modified 14.11.2025 15:55:01

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

7

CVE-2025-62219

  • EPSS 0.04%
  • Published 11.11.2025 18:15:49
  • Last modified 14.11.2025 15:54:21

Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

7

CVE-2025-62215

Warning Media report
  • EPSS 0.05%
  • Published 11.11.2025 18:15:48
  • Last modified 14.11.2025 02:00:02

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

9.8

CVE-2025-60724

Media report
  • EPSS 0.07%
  • Published 11.11.2025 18:15:41
  • Last modified 12.11.2025 16:19:12

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

7

CVE-2025-59289

  • EPSS 0.05%
  • Published 14.10.2025 17:01:48
  • Last modified 22.10.2025 16:45:33

Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

7.8

CVE-2025-59278

  • EPSS 0.09%
  • Published 14.10.2025 17:01:46
  • Last modified 27.10.2025 19:44:49

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

7

CVE-2025-59261

  • EPSS 0.05%
  • Published 14.10.2025 17:01:45
  • Last modified 17.10.2025 15:52:53

Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

7.8

CVE-2025-59275

  • EPSS 0.09%
  • Published 14.10.2025 17:01:45
  • Last modified 27.10.2025 20:12:00

Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.