Microsoft Windows 11 22H2 vulnerabilities
1,432 known vulnerabilities affecting microsoft/windows_11_22h2.
Total CVEs
1,432
CISA KEV
67
actively exploited
Public exploits
43
Exploited in wild
75
Severity breakdown
CRITICAL39HIGH1001MEDIUM387LOW5
Vulnerabilities
Page 40 of 72
CVE-2025-48004P3HIGHCVSS 7.0fixed in 10.0.22621.60602025-10-14
CVE-2025-48004 [HIGH] CWE-416 CVE-2025-48004: Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privile
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2025-21197P3MEDIUMCVSS 6.5fixed in 10.0.22621.51892025-04-08
CVE-2025-21197 [MEDIUM] CWE-284 CVE-2025-21197: Improper access control in Windows NTFS allows an authorized attacker to disclose file path informat
Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.
nvd
CVE-2024-43495P3HIGHCVSS 7.3fixed in 10.0.22621.38802024-09-10
CVE-2024-43495 [HIGH] CWE-190 CVE-2024-43495: Windows libarchive Remote Code Execution Vulnerability
Windows libarchive Remote Code Execution Vulnerability
nvd
CVE-2025-54919P3HIGHCVSS 7.5fixed in 10.0.22621.59092025-09-09
CVE-2025-54919 [HIGH] CWE-362 CVE-2025-54919: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
nvd
CVE-2025-49682P3HIGHCVSS 7.3fixed in 10.0.22621.56242025-07-08
CVE-2025-49682 [HIGH] CWE-416 CVE-2025-49682: Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-35383P3HIGHCVSS 7.5fixed in 10.0.22621.21342023-08-08
CVE-2023-35383 [HIGH] CWE-190 CVE-2023-35383: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2023-36567P3HIGHCVSS 7.5fixed in 10.0.22621.24282023-10-10
CVE-2023-36567 [HIGH] CWE-908 CVE-2023-36567: Windows Deployment Services Information Disclosure Vulnerability
Windows Deployment Services Information Disclosure Vulnerability
nvd
CVE-2023-36906P3HIGHCVSS 7.5fixed in 10.0.22621.21342023-08-08
CVE-2023-36906 [HIGH] CWE-170 CVE-2023-36906: Windows Cryptographic Services Information Disclosure Vulnerability
Windows Cryptographic Services Information Disclosure Vulnerability
nvd
CVE-2023-21817P3HIGHCVSS 7.8fixed in 10.0.22621.12652023-02-14
CVE-2023-21817 [HIGH] CWE-287 CVE-2023-21817: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2023-21822P3HIGHCVSS 7.8fixed in 10.0.22621.12652023-02-14
CVE-2023-21822 [HIGH] CWE-416 CVE-2023-21822: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-21805P3HIGHCVSS 7.8fixed in 10.0.22621.12652023-02-14
CVE-2023-21805 [HIGH] CWE-77 CVE-2023-21805: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2023-36898P3HIGHCVSS 7.8fixed in 10.0.22621.21342023-08-08
CVE-2023-36898 [HIGH] CWE-426 CVE-2023-36898: Tablet Windows User Interface Application Core Remote Code Execution Vulnerability
Tablet Windows User Interface Application Core Remote Code Execution Vulnerability
nvd
CVE-2023-21691P3HIGHCVSS 7.5fixed in 10.0.22621.12652023-02-14
CVE-2023-21691 [HIGH] CWE-125 CVE-2023-21691: Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
nvd
CVE-2023-36705P3HIGHCVSS 7.8fixed in 10.0.22621.27152023-11-14
CVE-2023-36705 [HIGH] CWE-59 CVE-2023-36705: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2025-59194P3HIGHCVSS 7.0fixed in 10.0.22621.60602025-10-14
CVE-2025-59194 [HIGH] CWE-908 CVE-2025-59194: Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges
Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-35343P3HIGHCVSS 7.8fixed in 10.0.22621.19922023-07-11
CVE-2023-35343 [HIGH] CWE-426 CVE-2023-35343: Windows Geolocation Service Remote Code Execution Vulnerability
Windows Geolocation Service Remote Code Execution Vulnerability
nvd
CVE-2023-24905P3HIGHCVSS 7.8fixed in 10.0.22000.17022023-05-09
CVE-2023-24905 [HIGH] CWE-284 CVE-2023-24905: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2023-35313P3HIGHCVSS 7.8fixed in 10.0.22621.19922023-07-11
CVE-2023-35313 [HIGH] CWE-416 CVE-2023-35313: Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability
nvd
CVE-2024-21354P3HIGHCVSS 7.8fixed in 10.0.22621.31552024-02-13
CVE-2024-21354 [HIGH] CWE-122 CVE-2024-21354: Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
nvd
CVE-2023-36719P3HIGHCVSS 7.8fixed in 10.0.22621.27152023-11-14
CVE-2023-36719 [HIGH] CWE-20 CVE-2023-36719: Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
nvd