Microsoft Windows 11 Version 21H2 vulnerabilities
1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.
Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
24
Exploited in wild
77
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4
Vulnerabilities
Page 27 of 78
CVE-2023-36571HIGHCVSS 7.3≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36571 [HIGH] CWE-94 CVE-2023-36571: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36436HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36436 [HIGH] CVE-2023-36436: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2023-36731HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36731 [HIGH] CWE-20 Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-36596HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36596 [HIGH] CWE-822 CVE-2023-36596: Remote Procedure Call Information Disclosure Vulnerability
Remote Procedure Call Information Disclosure Vulnerability
nvd
CVE-2023-36711HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36711 [HIGH] CWE-59 CVE-2023-36711: Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
nvd
CVE-2023-36720HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36720 [HIGH] CVE-2023-36720: Windows Mixed Reality Developer Tools Denial of Service Vulnerability
Windows Mixed Reality Developer Tools Denial of Service Vulnerability
nvd
CVE-2023-36590HIGHCVSS 7.3≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36590 [HIGH] CVE-2023-36590: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36710HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36710 [HIGH] CWE-197 CVE-2023-36710: Windows Media Foundation Core Remote Code Execution Vulnerability
Windows Media Foundation Core Remote Code Execution Vulnerability
nvd
CVE-2023-38171HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-38171 [HIGH] CWE-476 Microsoft QUIC Denial of Service Vulnerability
Microsoft QUIC Denial of Service Vulnerability
Microsoft QUIC Denial of Service Vulnerability
cvelistv5
CVE-2023-36557HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36557 [HIGH] PrintHTML API Remote Code Execution Vulnerability
PrintHTML API Remote Code Execution Vulnerability
PrintHTML API Remote Code Execution Vulnerability
cvelistv5
CVE-2023-36598HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36598 [HIGH] CWE-122 CVE-2023-36598: Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2023-36702HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36702 [HIGH] CWE-94 CVE-2023-36702: Microsoft DirectMusic Remote Code Execution Vulnerability
Microsoft DirectMusic Remote Code Execution Vulnerability
nvd
CVE-2023-36732HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36732 [HIGH] Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-36723HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36723 [HIGH] CWE-59 CVE-2023-36723: Windows Container Manager Service Elevation of Privilege Vulnerability
Windows Container Manager Service Elevation of Privilege Vulnerability
nvd
CVE-2023-41768HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-41768 [HIGH] CWE-416 CVE-2023-41768: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-41771HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-41771 [HIGH] CWE-416 CVE-2023-41771: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-36709HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36709 [HIGH] CWE-476 CVE-2023-36709: Microsoft AllJoyn API Denial of Service Vulnerability
Microsoft AllJoyn API Denial of Service Vulnerability
nvd
CVE-2023-41773HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-41773 [HIGH] CWE-416 CVE-2023-41773: Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-36585HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36585 [HIGH] CWE-20 CVE-2023-36585: Windows upnphost.dll Denial of Service Vulnerability
Windows upnphost.dll Denial of Service Vulnerability
nvd
CVE-2023-36573HIGHCVSS 7.3≥ 10.0.0, < 10.0.22000.25382023-10-10
CVE-2023-36573 [HIGH] CWE-94 CVE-2023-36573: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd