Microsoft Windows 11 Version 21H2 vulnerabilities
1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.
Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
47
Exploited in wild
90
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4
Vulnerabilities
Page 5 of 78
CVE-2023-29324P2MEDIUMCVSS 6.5Exploited≥ 10.0.0, < 10.0.22000.19362023-05-09
CVE-2023-29324 [MEDIUM] CWE-73 CVE-2023-29324: Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows MSHTML Platform Security Feature Bypass Vulnerability
nvd
CVE-2023-28218P2HIGHCVSS 7.0Exploited≥ 10.0.0, < 10.0.22000.18172023-04-11
CVE-2023-28218 [HIGH] CWE-122 CVE-2023-28218: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2022-30170P2HIGHCVSS 7.3Exploited≥ 10.0.22000.0, < 10.0.22000.9782022-09-13
CVE-2022-30170 [HIGH] CVE-2022-30170: Windows Credential Roaming Service Elevation of Privilege Vulnerability
Windows Credential Roaming Service Elevation of Privilege Vulnerability
nvd
CVE-2024-38063P1CRITICALCVSS 9.8PoC≥ 10.0.0, < 10.0.22000.31972024-08-13
CVE-2024-38063 [CRITICAL] CWE-191 CVE-2024-38063: Windows TCP/IP Remote Code Execution Vulnerability
Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2022-21874P2CRITICALCVSS 9.8Exploited≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21874 [CRITICAL] CVE-2022-21874: Windows Security Center API Remote Code Execution Vulnerability
Windows Security Center API Remote Code Execution Vulnerability
nvd
CVE-2023-38146P2HIGHCVSS 8.8PoC≥ 10.0.0, < 10.0.22000.24162023-09-12
CVE-2023-38146 [HIGH] CWE-367 CVE-2023-38146: Windows Themes Remote Code Execution Vulnerability
Windows Themes Remote Code Execution Vulnerability
nvd
CVE-2023-35628P2HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.26522023-12-12
CVE-2023-35628 [HIGH] CWE-416 CVE-2023-35628: Windows MSHTML Platform Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
nvd
CVE-2022-34718P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.9782022-09-13
CVE-2022-34718 [CRITICAL] CVE-2022-34718: Windows TCP/IP Remote Code Execution Vulnerability
Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2024-30080P2CRITICALCVSS 9.8≥ 10.0.22000.0, < 10.0.22000.30192024-06-11
CVE-2024-30080 [CRITICAL] CWE-416 CVE-2024-30080: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2022-21972P2HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.6752022-05-10
CVE-2022-21972 [HIGH] CVE-2022-21972: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2024-30085P2HIGHCVSS 7.8PoC≥ 10.0.22000.0, < 10.0.22000.30192024-06-11
CVE-2024-30085 [HIGH] CWE-122 CVE-2024-30085: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-37958P2HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.9782022-09-13
CVE-2022-37958 [HIGH] CVE-2022-37958: SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
nvd
CVE-2022-23270P2HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.6752022-05-10
CVE-2022-23270 [HIGH] CVE-2022-23270: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-24497P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.6132022-04-15
CVE-2022-24497 [CRITICAL] CVE-2022-24497: Windows Network File System Remote Code Execution Vulnerability
Windows Network File System Remote Code Execution Vulnerability
nvd
CVE-2023-21690P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22621.15742023-02-14
CVE-2023-21690 [CRITICAL] CWE-122 CVE-2023-21690: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2022-24491P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.6132022-04-15
CVE-2022-24491 [CRITICAL] CVE-2022-24491: Windows Network File System Remote Code Execution Vulnerability
Windows Network File System Remote Code Execution Vulnerability
nvd
CVE-2023-21689P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22621.15742023-02-14
CVE-2023-21689 [CRITICAL] CWE-122 CVE-2023-21689: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2023-21692P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22621.15742023-02-14
CVE-2023-21692 [CRITICAL] CWE-122 CVE-2023-21692: Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
nvd
CVE-2023-36397P2CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.26002023-11-14
CVE-2023-36397 [CRITICAL] CWE-126 CVE-2023-36397: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
nvd
CVE-2022-26928P4HIGHCVSS 7.0Exploited≥ 10.0.0, < 10.0.22000.19362022-09-13
CVE-2022-26928 [HIGH] CWE-362 CVE-2022-26928: Windows Photo Import API Elevation of Privilege Vulnerability
Windows Photo Import API Elevation of Privilege Vulnerability
nvd