Microsoft Windows 11 Version 21H2 vulnerabilities

1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.

Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
24
Exploited in wild
77
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4

Vulnerabilities

Page 30 of 78
CVE-2023-36805HIGHCVSS 7.0≥ 10.0.0, < 10.0.22000.24162023-09-12
CVE-2023-36805 [HIGH] CWE-77 CVE-2023-36805: Windows MSHTML Platform Security Feature Bypass Vulnerability Windows MSHTML Platform Security Feature Bypass Vulnerability
nvd
CVE-2023-38139HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.24162023-09-12
CVE-2023-38139 [HIGH] CWE-416 CVE-2023-38139: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-38143HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.24162023-09-12
CVE-2023-38143 [HIGH] CWE-122 CVE-2023-38143: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-36804HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.24162023-09-12
CVE-2023-36804 [HIGH] CWE-416 Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability Windows GDI Elevation of Privilege Vulnerability
cvelistv5
CVE-2023-38140MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.24162023-09-12
CVE-2023-38140 [MEDIUM] CWE-908 CVE-2023-38140: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-36803MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.24162023-09-12
CVE-2023-36803 [MEDIUM] CWE-126 CVE-2023-36803: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-38160MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.24162023-09-12
CVE-2023-38160 [MEDIUM] CWE-416 CVE-2023-38160: Windows TCP/IP Information Disclosure Vulnerability Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2023-36903CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-36903 [CRITICAL] CWE-59 CVE-2023-36903: Windows System Assessment Tool Elevation of Privilege Vulnerability Windows System Assessment Tool Elevation of Privilege Vulnerability
nvd
CVE-2023-38186CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-38186 [CRITICAL] CWE-306 CVE-2023-38186: Windows Mobile Device Management Elevation of Privilege Vulnerability Windows Mobile Device Management Elevation of Privilege Vulnerability
nvd
CVE-2023-35385CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-35385 [CRITICAL] CWE-190 CVE-2023-35385: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36910CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-36910 [CRITICAL] CWE-190 CVE-2023-36910: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-36911CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-36911 [CRITICAL] CWE-190 CVE-2023-36911: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2023-35381HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-35381 [HIGH] CWE-190 CVE-2023-35381: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2023-38184HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-38184 [HIGH] CWE-416 CVE-2023-38184: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
CVE-2023-35382HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-35382 [HIGH] CWE-416 CVE-2023-35382: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-36905HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-36905 [HIGH] CWE-125 CVE-2023-36905: Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
nvd
CVE-2023-35387HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-35387 [HIGH] CWE-191 CVE-2023-35387: Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
nvd
CVE-2023-38172HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-38172 [HIGH] CWE-126 CVE-2023-38172: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2023-36904HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-36904 [HIGH] CWE-126 CVE-2023-36904: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-36906HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.22952023-08-08
CVE-2023-36906 [HIGH] CWE-170 CVE-2023-36906: Windows Cryptographic Services Information Disclosure Vulnerability Windows Cryptographic Services Information Disclosure Vulnerability
nvd