Microsoft Windows 11 Version 21H2 vulnerabilities
1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.
Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
24
Exploited in wild
77
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4
Vulnerabilities
Page 16 of 78
CVE-2024-26194HIGHCVSS 7.4≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26194 [HIGH] CWE-347 Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2024-26254HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26254 [HIGH] CWE-822 CVE-2024-26254: Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
cvelistv5nvd
CVE-2024-21447HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-21447 [HIGH] CWE-59 CVE-2024-21447: Windows Authentication Elevation of Privilege Vulnerability
Windows Authentication Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-20678HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-20678 [HIGH] CWE-843 CVE-2024-20678: Remote Procedure Call Runtime Remote Code Execution Vulnerability
Remote Procedure Call Runtime Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2024-26248HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26248 [HIGH] CWE-303 CVE-2024-26248: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-26211HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26211 [HIGH] CWE-122 CVE-2024-26211: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-26158HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26158 [HIGH] CWE-59 CVE-2024-26158: Microsoft Install Service Elevation of Privilege Vulnerability
Microsoft Install Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-26240HIGHCVSS 8.0≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26240 [HIGH] CWE-20 Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2024-26244HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26244 [HIGH] CWE-191 CVE-2024-26244: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2024-26243HIGHCVSS 7.0≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26243 [HIGH] CWE-126 CVE-2024-26243: Windows USB Print Driver Elevation of Privilege Vulnerability
Windows USB Print Driver Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-29062HIGHCVSS 7.1≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-29062 [HIGH] CWE-367 Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2024-26230HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26230 [HIGH] CWE-416 CVE-2024-26230: Windows Telephony Server Elevation of Privilege Vulnerability
Windows Telephony Server Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-28925HIGHCVSS 8.0≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-28925 [HIGH] CWE-121 Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2024-26229HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26229 [HIGH] CWE-122 CVE-2024-26229: Windows CSC Service Elevation of Privilege Vulnerability
Windows CSC Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-26241HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26241 [HIGH] CWE-416 Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2024-26175HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26175 [HIGH] CWE-125 Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2024-28902MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-28902 [MEDIUM] CWE-126 CVE-2024-28902: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
cvelistv5nvd
CVE-2024-26168MEDIUMCVSS 6.8≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26168 [MEDIUM] CWE-122 Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2024-26220MEDIUMCVSS 5.0≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26220 [MEDIUM] CWE-908 CVE-2024-26220: Windows Mobile Hotspot Information Disclosure Vulnerability
Windows Mobile Hotspot Information Disclosure Vulnerability
cvelistv5nvd
CVE-2024-26207MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.28992024-04-09
CVE-2024-26207 [MEDIUM] CWE-125 CVE-2024-26207: Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
cvelistv5nvd