Microsoft Windows 11 22H2 vulnerabilities

1,432 known vulnerabilities affecting microsoft/windows_11_22h2.

Total CVEs

1,432

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL39HIGH1001MEDIUM387LOW5

Vulnerabilities

SortPage 27 of 72

CVE-2025-24060P3HIGHCVSS 7.8fixed in 10.0.22621.51892025-04-08

CVE-2025-24060 [HIGH] CWE-20 CVE-2025-24060: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privi Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-24073P3HIGHCVSS 7.8fixed in 10.0.22621.51892025-04-08

CVE-2025-24073 [HIGH] CWE-20 CVE-2025-24073: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privi Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

nvd

CVE-2024-37982P3HIGHCVSS 7.8≤ 10.0.22621.43172024-10-08

CVE-2024-37982 [HIGH] CWE-822 CVE-2024-37982: Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

nvd

CVE-2025-24046P3HIGHCVSS 7.8fixed in 10.0.22621.50392025-03-11

CVE-2025-24046 [HIGH] CWE-416 CVE-2025-24046: Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges lo Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-50176P3HIGHCVSS 7.8fixed in 10.0.22621.57682025-08-12

CVE-2025-50176 [HIGH] CWE-122 CVE-2025-50176: Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorize Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally.

nvd

CVE-2025-54912P3HIGHCVSS 7.8fixed in 10.0.22621.59092025-09-09

CVE-2025-54912 [HIGH] CWE-416 CVE-2025-54912: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-32712P3HIGHCVSS 7.8fixed in 10.0.22621.54722025-06-10

CVE-2025-32712 [HIGH] CWE-416 CVE-2025-32712: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59201P3HIGHCVSS 7.8fixed in 10.0.22621.60602025-10-14

CVE-2025-59201 [HIGH] CWE-284 CVE-2025-59201: Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53152P3HIGHCVSS 7.8fixed in 10.0.22621.57682025-08-12

CVE-2025-53152 [HIGH] CWE-416 CVE-2025-53152: Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally. Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.

nvd

CVE-2025-50153P3HIGHCVSS 7.8fixed in 10.0.22621.57682025-08-12

CVE-2025-50153 [HIGH] CWE-416 CVE-2025-50153: Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locall Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49761P3HIGHCVSS 7.8fixed in 10.0.22621.57682025-08-12

CVE-2025-49761 [HIGH] CWE-416 CVE-2025-49761: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53151P3HIGHCVSS 7.8fixed in 10.0.22621.57682025-08-12

CVE-2025-53151 [HIGH] CWE-416 CVE-2025-53151: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49675P3HIGHCVSS 7.8fixed in 10.0.22621.56242025-07-08

CVE-2025-49675 [HIGH] CWE-416 CVE-2025-49675: Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49726P3HIGHCVSS 7.8fixed in 10.0.22621.56242025-07-08

CVE-2025-49726 [HIGH] CWE-416 CVE-2025-49726: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59277P3HIGHCVSS 7.8fixed in 10.0.22621.60602025-10-14

CVE-2025-59277 [HIGH] CWE-1287 CVE-2025-59277: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-54092P3HIGHCVSS 7.8fixed in 10.0.22621.59092025-09-09

CVE-2025-54092 [HIGH] CWE-362 CVE-2025-54092: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49665P3HIGHCVSS 7.8fixed in 10.0.22621.56242025-07-08

CVE-2025-49665 [HIGH] CWE-362 CVE-2025-49665: Concurrent execution using shared resource with improper synchronization ('race condition') in Works Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49733P3HIGHCVSS 7.8fixed in 10.0.22621.56242025-07-08

CVE-2025-49733 [HIGH] CWE-416 CVE-2025-49733: Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49725P3HIGHCVSS 7.8fixed in 10.0.22621.56242025-07-08

CVE-2025-49725 [HIGH] CWE-416 CVE-2025-49725: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53768P3HIGHCVSS 7.8fixed in 10.0.22621.60602025-10-14

CVE-2025-53768 [HIGH] CWE-362 CVE-2025-53768: Use after free in Xbox allows an authorized attacker to elevate privileges locally. Use after free in Xbox allows an authorized attacker to elevate privileges locally.

nvd

← Previous27 / 72Next →