Microsoft Windows 11 21H2 vulnerabilities
799 known vulnerabilities affecting microsoft/windows_11_21h2.
Total CVEs
799
CISA KEV
56
actively exploited
Public exploits
34
Exploited in wild
63
Severity breakdown
CRITICAL34HIGH572MEDIUM192LOW1
Vulnerabilities
Page 1 of 40
CVE-2021-34527P1HIGHCVSS 8.8KEVPoCRansomwarefixed in 10.0.22000.3182021-07-02
CVE-2021-34527 [HIGH] CVE-2021-34527: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly pe
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
UPDAT
nvd
CVE-2022-26923P1HIGHCVSS 8.8KEVPoCRansomwarefixed in 10.0.22000.18172022-05-10
CVE-2022-26923 [HIGH] CWE-295 CVE-2022-26923: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2024-21412P1HIGHCVSS 8.1KEVPoCRansomwarefixed in 10.0.22000.27772024-02-13
CVE-2024-21412 [HIGH] CWE-693 CVE-2024-21412: Internet Shortcut Files Security Feature Bypass Vulnerability
Internet Shortcut Files Security Feature Bypass Vulnerability
nvd
CVE-2023-36884P1HIGHCVSS 7.5KEVPoCRansomwarefixed in 10.0.22000.22952023-07-11
CVE-2023-36884 [HIGH] CWE-362 CVE-2023-36884: Windows Search Remote Code Execution Vulnerability
Windows Search Remote Code Execution Vulnerability
nvd
CVE-2022-30190P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22000.7392022-06-01
CVE-2022-30190 [HIGH] CVE-2022-30190: A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calli
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the cont
nvd
CVE-2023-44487P1HIGHCVSS 7.5KEVPoCfixed in 10.0.22000.25382023-10-10
CVE-2023-44487 [HIGH] CWE-400 CVE-2023-44487: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancell
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
nvd
CVE-2024-21338P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22000.27772024-02-13
CVE-2024-21338 [HIGH] CWE-822 CVE-2024-21338: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-30088P1HIGHCVSS 7.0KEVPoCRansomwarefixed in 10.0.22000.30192024-06-11
CVE-2024-30088 [HIGH] CWE-367 CVE-2024-30088: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-28252P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22000.18172023-04-11
CVE-2023-28252 [HIGH] CWE-122 CVE-2023-28252: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21999P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22000.4932022-02-09
CVE-2022-21999 [HIGH] CWE-22 CVE-2022-21999: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-37969P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22000.9782022-09-13
CVE-2022-37969 [HIGH] CWE-787 CVE-2022-37969: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21674P1HIGHCVSS 8.8KEVPoCfixed in 10.0.22000.14552023-01-10
CVE-2023-21674 [HIGH] CWE-416 CVE-2023-21674: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2022-21971P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22000.4932022-02-09
CVE-2022-21971 [HIGH] CWE-824 CVE-2022-21971: Windows Runtime Remote Code Execution Vulnerability
Windows Runtime Remote Code Execution Vulnerability
nvd
CVE-2023-36874P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22000.21762023-07-11
CVE-2023-36874 [HIGH] CWE-59 CVE-2023-36874: Windows Error Reporting Service Elevation of Privilege Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
nvd
CVE-2021-41379P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22000.3182021-11-10
CVE-2021-41379 [HIGH] CWE-59 CVE-2021-41379: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-35250P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22000.30192024-06-11
CVE-2024-35250 [HIGH] CWE-822 CVE-2024-35250: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38193P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22000.31472024-08-13
CVE-2024-38193 [HIGH] CWE-416 CVE-2024-38193: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2022-24521P1HIGHCVSS 7.8KEVPoCRansomwarefixed in 10.0.22000.6132022-04-15
CVE-2022-24521 [HIGH] CWE-787 CVE-2022-24521: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-29360P1HIGHCVSS 8.4KEVPoCfixed in 10.0.22000.20572023-06-14
CVE-2023-29360 [HIGH] CWE-822 CVE-2023-29360: Microsoft Streaming Service Elevation of Privilege Vulnerability
Microsoft Streaming Service Elevation of Privilege Vulnerability
nvd
CVE-2023-36802P1HIGHCVSS 7.8KEVPoCfixed in 10.0.22000.24162023-09-12
CVE-2023-36802 [HIGH] CWE-416 CVE-2023-36802: Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
nvd
1 / 40Next →