Microsoft Windows 11 Version 21H2 vulnerabilities

1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.

Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
24
Exploited in wild
77
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4

Vulnerabilities

Page 42 of 78
CVE-2023-28266MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.18172023-04-11
CVE-2023-28266 [MEDIUM] CWE-126 CVE-2023-28266: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2023-28253MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.18172023-04-11
CVE-2023-28253 [MEDIUM] CVE-2023-28253: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-28298MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.18172023-04-11
CVE-2023-28298 [MEDIUM] Windows Kernel Denial of Service Vulnerability Windows Kernel Denial of Service Vulnerability Windows Kernel Denial of Service Vulnerability
cvelistv5
CVE-2023-28249MEDIUMCVSS 6.8≥ 10.0.0, < 10.0.22000.18172023-04-11
CVE-2023-28249 [MEDIUM] CWE-863 CVE-2023-28249: Windows Boot Manager Security Feature Bypass Vulnerability Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2023-28270MEDIUMCVSS 6.8≥ 10.0.0, < 10.0.22000.18172023-04-11
CVE-2023-28270 [MEDIUM] CWE-863 CVE-2023-28270: Windows Lock Screen Security Feature Bypass Vulnerability Windows Lock Screen Security Feature Bypass Vulnerability
nvd
CVE-2023-28267MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.22000.18172023-04-11
CVE-2023-28267 [MEDIUM] CWE-126 CVE-2023-28267: Remote Desktop Protocol Client Information Disclosure Vulnerability Remote Desktop Protocol Client Information Disclosure Vulnerability
nvd
CVE-2023-28228MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.18172023-04-11
CVE-2023-28228 [MEDIUM] CWE-347 Windows Spoofing Vulnerability Windows Spoofing Vulnerability Windows Spoofing Vulnerability
cvelistv5
CVE-2023-23392CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-23392 [CRITICAL] CWE-416 CVE-2023-23392: HTTP Protocol Stack Remote Code Execution Vulnerability HTTP Protocol Stack Remote Code Execution Vulnerability
nvd
CVE-2023-23415CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-23415 [CRITICAL] CWE-122 CVE-2023-23415: Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
nvd
CVE-2023-21708CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-21708 [CRITICAL] CWE-191 CVE-2023-21708: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2023-23402HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-23402 [HIGH] CWE-415 Windows Media Remote Code Execution Vulnerability Windows Media Remote Code Execution Vulnerability Windows Media Remote Code Execution Vulnerability
cvelistv5
CVE-2023-23422HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-23422 [HIGH] CVE-2023-23422: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-23388HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-23388 [HIGH] CWE-681 CVE-2023-23388: Windows Bluetooth Driver Elevation of Privilege Vulnerability Windows Bluetooth Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-24909HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-24909 [HIGH] CWE-190 CVE-2023-24909: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-23407HIGHCVSS 7.1≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-23407 [HIGH] CWE-591 CVE-2023-23407: Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
nvd
CVE-2023-23421HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-23421 [HIGH] CWE-416 CVE-2023-23421: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-24867HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-24867 [HIGH] CWE-122 CVE-2023-24867: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
nvd
CVE-2023-24861HIGHCVSS 7.0≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-24861 [HIGH] CWE-367 CVE-2023-24861: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2023-24864HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-24864 [HIGH] CWE-191 CVE-2023-24864: Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-23416HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.16962023-03-14
CVE-2023-23416 [HIGH] CWE-20 CVE-2023-23416: Windows Cryptographic Services Remote Code Execution Vulnerability Windows Cryptographic Services Remote Code Execution Vulnerability
nvd