Microsoft Windows 11 Version 21H2 vulnerabilities
1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.
Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
47
Exploited in wild
90
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4
Vulnerabilities
Page 12 of 78
CVE-2023-36434P3CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36434 [CRITICAL] CWE-307 CVE-2023-36434: Windows IIS Server Elevation of Privilege Vulnerability
Windows IIS Server Elevation of Privilege Vulnerability
nvd
CVE-2023-21818P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.22621.15742023-02-14
CVE-2023-21818 [HIGH] CWE-20 CVE-2023-21818: Windows Secure Channel Denial of Service Vulnerability
Windows Secure Channel Denial of Service Vulnerability
nvd
CVE-2023-24871P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-24871 [HIGH] CWE-190 CVE-2023-24871: Windows Bluetooth Service Remote Code Execution Vulnerability
Windows Bluetooth Service Remote Code Execution Vulnerability
nvd
CVE-2022-24541P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.6132022-04-15
CVE-2022-24541 [HIGH] CVE-2022-24541: Windows Server Service Remote Code Execution Vulnerability
Windows Server Service Remote Code Execution Vulnerability
nvd
CVE-2022-35804P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.8562022-08-09
CVE-2022-35804 [HIGH] CVE-2022-35804: SMB Client and Server Remote Code Execution Vulnerability
SMB Client and Server Remote Code Execution Vulnerability
nvd
CVE-2022-24508P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.5562022-03-09
CVE-2022-24508 [HIGH] CVE-2022-24508: Win32 File Enumeration Remote Code Execution Vulnerability
Win32 File Enumeration Remote Code Execution Vulnerability
nvd
CVE-2024-21440P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.28362024-03-12
CVE-2024-21440 [HIGH] CWE-197 CVE-2024-21440: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-26162P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.28362024-03-12
CVE-2024-26162 [HIGH] CWE-681 CVE-2024-26162: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-26210P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26210 [HIGH] CWE-122 CVE-2024-26210: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-26244P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26244 [HIGH] CWE-191 CVE-2024-26244: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-26159P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.28362024-03-12
CVE-2024-26159 [HIGH] CWE-122 CVE-2024-26159: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-21451P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.28362024-03-12
CVE-2024-21451 [HIGH] CWE-197 CVE-2024-21451: Microsoft ODBC Driver Remote Code Execution Vulnerability
Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2024-30097P3HIGHCVSS 8.8≥ 10.0.22000.0, < 10.0.22000.30192024-06-11
CVE-2024-30097 [HIGH] CWE-415 CVE-2024-30097: Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
nvd
CVE-2024-30006P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.29602024-05-14
CVE-2024-30006 [HIGH] CWE-416 CVE-2024-30006: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2024-21349P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.27772024-02-13
CVE-2024-21349 [HIGH] CWE-122 CVE-2024-21349: Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
nvd
CVE-2024-43599P3HIGHCVSS 8.8≥ 10.0.22000.0, < 10.0.22000.32602024-10-08
CVE-2024-43599 [HIGH] CWE-416 CVE-2024-43599: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2024-43517P3HIGHCVSS 8.8≥ 10.0.22000.0, < 10.0.22000.32602024-10-08
CVE-2024-43517 [HIGH] CWE-122 CVE-2024-43517: Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
nvd
CVE-2023-38186P3CRITICALCVSS 9.8≥ 10.0.22000.0, < 10.0.22000.22952023-08-08
CVE-2023-38186 [CRITICAL] CWE-306 CVE-2023-38186: Windows Mobile Device Management Elevation of Privilege Vulnerability
Windows Mobile Device Management Elevation of Privilege Vulnerability
nvd
CVE-2022-38034P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38034 [HIGH] CVE-2022-38034: Windows Workstation Service Elevation of Privilege Vulnerability
Windows Workstation Service Elevation of Privilege Vulnerability
nvd
CVE-2022-21851P3HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21851 [HIGH] CVE-2022-21851: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd