Microsoft Windows 11 22H2 vulnerabilities
1,432 known vulnerabilities affecting microsoft/windows_11_22h2.
Total CVEs
1,432
CISA KEV
67
actively exploited
Public exploits
43
Exploited in wild
75
Severity breakdown
CRITICAL39HIGH1001MEDIUM387LOW5
Vulnerabilities
Page 61 of 72
CVE-2023-32055P4MEDIUMCVSS 6.7fixed in 10.0.22621.19922023-07-11
CVE-2023-32055 [MEDIUM] CWE-416 CVE-2023-32055: Active Template Library Elevation of Privilege Vulnerability
Active Template Library Elevation of Privilege Vulnerability
nvd
CVE-2025-47980P4MEDIUMCVSS 6.2fixed in 10.0.22621.56242025-07-08
CVE-2025-47980 [MEDIUM] CWE-200 CVE-2025-47980: Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an un
Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-24900P4MEDIUMCVSS 5.9fixed in 10.0.22000.17022023-05-09
CVE-2023-24900 [MEDIUM] CWE-125 CVE-2023-24900: Windows NTLM Security Support Provider Information Disclosure Vulnerability
Windows NTLM Security Support Provider Information Disclosure Vulnerability
nvd
CVE-2025-54101P4MEDIUMCVSS 4.8fixed in 10.0.22621.59092025-09-09
CVE-2025-54101 [MEDIUM] CWE-416 CVE-2025-54101: Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.
Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.
nvd
CVE-2025-47160P4MEDIUMCVSS 5.4fixed in 10.0.22621.54722025-06-10
CVE-2025-47160 [MEDIUM] CWE-693 CVE-2025-47160: Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security f
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2025-55229P4MEDIUMCVSS 5.3fixed in 10.0.22621.53352025-08-21
CVE-2025-55229 [MEDIUM] CWE-347 CVE-2025-55229: Improper verification of cryptographic signature in Windows Certificates allows an unauthorized atta
Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-20569P4MEDIUMCVSS 4.7fixed in 10.0.22621.21342023-08-08
CVE-2023-20569 [MEDIUM] CWE-203 CVE-2023-20569: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the retur
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.
nvd
CVE-2023-36046P4HIGHCVSS 7.1fixed in 10.0.22621.27152023-11-14
CVE-2023-36046 [HIGH] CWE-59 CVE-2023-36046: Windows Authentication Denial of Service Vulnerability
Windows Authentication Denial of Service Vulnerability
nvd
CVE-2023-28270P4MEDIUMCVSS 6.8fixed in 10.0.22621.15552023-04-11
CVE-2023-28270 [MEDIUM] CWE-863 CVE-2023-28270: Windows Lock Screen Security Feature Bypass Vulnerability
Windows Lock Screen Security Feature Bypass Vulnerability
nvd
CVE-2025-21202P4MEDIUMCVSS 6.1fixed in 10.0.22621.47512025-01-14
CVE-2025-21202 [MEDIUM] CWE-284 CVE-2025-21202: Windows Recovery Environment Agent Elevation of Privilege Vulnerability
Windows Recovery Environment Agent Elevation of Privilege Vulnerability
nvd
CVE-2025-29974P4MEDIUMCVSS 5.7fixed in 10.0.22621.53352025-05-13
CVE-2025-29974 [MEDIUM] CWE-125 CVE-2025-29974: Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose
Integer underflow (wrap or wraparound) in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network.
nvd
CVE-2025-32722P4MEDIUMCVSS 5.5fixed in 10.0.22621.54722025-06-10
CVE-2025-32722 [MEDIUM] CWE-284 CVE-2025-32722: Improper access control in Windows Storage Port Driver allows an authorized attacker to disclose inf
Improper access control in Windows Storage Port Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2024-43585P4MEDIUMCVSS 5.5fixed in 10.0.22621.43172024-10-08
CVE-2024-43585 [MEDIUM] CWE-693 CVE-2024-43585: Code Integrity Guard Security Feature Bypass Vulnerability
Code Integrity Guard Security Feature Bypass Vulnerability
nvd
CVE-2023-28226P4MEDIUMCVSS 5.3fixed in 10.0.22621.15552023-04-11
CVE-2023-28226 [MEDIUM] CWE-347 CVE-2023-28226: Windows Enroll Engine Security Feature Bypass Vulnerability
Windows Enroll Engine Security Feature Bypass Vulnerability
nvd
CVE-2023-35377P4MEDIUMCVSS 6.5fixed in 10.0.22621.21342023-08-08
CVE-2023-35377 [MEDIUM] CWE-20 CVE-2023-35377: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-35376P4MEDIUMCVSS 6.5fixed in 10.0.22621.21342023-08-08
CVE-2023-35376 [MEDIUM] CWE-20 CVE-2023-35376: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-36909P4MEDIUMCVSS 6.5fixed in 10.0.22621.21342023-08-08
CVE-2023-36909 [MEDIUM] CWE-191 CVE-2023-36909: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-28266P4MEDIUMCVSS 5.5fixed in 10.0.22621.15552023-04-11
CVE-2023-28266 [MEDIUM] CWE-126 CVE-2023-28266: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2025-21226P4MEDIUMCVSS 6.6fixed in 10.0.22621.47512025-01-14
CVE-2025-21226 [MEDIUM] CWE-125 CVE-2025-21226: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd
CVE-2025-21260P4MEDIUMCVSS 6.6fixed in 10.0.22621.47512025-01-14
CVE-2025-21260 [MEDIUM] CWE-125 CVE-2025-21260: Windows Digital Media Elevation of Privilege Vulnerability
Windows Digital Media Elevation of Privilege Vulnerability
nvd