Microsoft Windows 11 Version 21H2 vulnerabilities

1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.

Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
24
Exploited in wild
77
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4

Vulnerabilities

Page 49 of 78
CVE-2023-21767HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21767 [HIGH] CWE-20 CVE-2023-21767: Windows Overlay Filter Elevation of Privilege Vulnerability Windows Overlay Filter Elevation of Privilege Vulnerability
nvd
CVE-2023-21539HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21539 [HIGH] CWE-125 CVE-2023-21539: Windows Authentication Remote Code Execution Vulnerability Windows Authentication Remote Code Execution Vulnerability
nvd
CVE-2023-21768HIGHCVSS 7.8ExploitedPoC≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21768 [HIGH] CWE-822 CVE-2023-21768: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2023-21682MEDIUMCVSS 5.3≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21682 [MEDIUM] CWE-125 CVE-2023-21682: Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
nvd
CVE-2023-21540MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21540 [MEDIUM] CWE-20 CVE-2023-21540: Windows Cryptographic Information Disclosure Vulnerability Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2023-21563MEDIUMCVSS 6.8≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21563 [MEDIUM] BitLocker Security Feature Bypass Vulnerability BitLocker Security Feature Bypass Vulnerability BitLocker Security Feature Bypass Vulnerability
cvelistv5
CVE-2023-21536MEDIUMCVSS 4.7≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21536 [MEDIUM] CWE-125 CVE-2023-21536: Event Tracing for Windows Information Disclosure Vulnerability Event Tracing for Windows Information Disclosure Vulnerability
nvd
CVE-2023-21766MEDIUMCVSS 4.7≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21766 [MEDIUM] CWE-591 CVE-2023-21766: Windows Overlay Filter Information Disclosure Vulnerability Windows Overlay Filter Information Disclosure Vulnerability
nvd
CVE-2023-21550MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21550 [MEDIUM] CWE-20 CVE-2023-21550: Windows Cryptographic Information Disclosure Vulnerability Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2023-21559MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21559 [MEDIUM] CWE-20 CVE-2023-21559: Windows Cryptographic Information Disclosure Vulnerability Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2023-21525MEDIUMCVSS 5.3≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21525 [MEDIUM] CVE-2023-21525: Remote Procedure Call Runtime Denial of Service Vulnerability Remote Procedure Call Runtime Denial of Service Vulnerability
nvd
CVE-2023-21776MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21776 [MEDIUM] CWE-125 CVE-2023-21776: Windows Kernel Information Disclosure Vulnerability Windows Kernel Information Disclosure Vulnerability
nvd
CVE-2023-21560MEDIUMCVSS 6.6≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21560 [MEDIUM] CWE-122 CVE-2023-21560: Windows Boot Manager Security Feature Bypass Vulnerability Windows Boot Manager Security Feature Bypass Vulnerability
nvd
CVE-2023-21759LOWCVSS 3.3≥ 10.0.0, < 10.0.22000.14552023-01-10
CVE-2023-21759 [LOW] CVE-2023-21759: Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
nvd
CVE-2022-44681HIGHCVSS 7.8≥ 10.0.22000.0, < 10.0.22000.13352022-12-13
CVE-2022-44681 [HIGH] CVE-2022-44681: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-44683HIGHCVSS 7.8≥ 10.0.22000.0, < 10.0.22000.13352022-12-13
CVE-2022-44683 [HIGH] CWE-416 CVE-2022-44683: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-44670HIGHCVSS 8.1≥ 10.0.22000.0, < 10.0.22000.13352022-12-13
CVE-2022-44670 [HIGH] CWE-367 CVE-2022-44670: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-41121HIGHCVSS 7.8≥ 10.0.22000.0, < 10.0.22000.13352022-12-13
CVE-2022-41121 [HIGH] CVE-2022-41121: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-44677HIGHCVSS 7.8≥ 10.0.22000.0, < 10.0.22000.13352022-12-13
CVE-2022-44677 [HIGH] CVE-2022-44677: Windows Projected File System Elevation of Privilege Vulnerability Windows Projected File System Elevation of Privilege Vulnerability
nvd
CVE-2022-44671HIGHCVSS 7.8≥ 10.0.22000.0, < 10.0.22000.13352022-12-13
CVE-2022-44671 [HIGH] CVE-2022-44671: Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability
nvd