Microsoft Windows 11 Version 21H2 vulnerabilities

1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.

Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
14
Exploited in wild
77
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4

Vulnerabilities

Page 5 of 78
CVE-2024-38259HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-38259 [HIGH] CWE-416 CVE-2024-38259: Microsoft Management Console Remote Code Execution Vulnerability Microsoft Management Console Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2024-38252HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-38252 [HIGH] CWE-416 CVE-2024-38252: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-38239HIGHCVSS 7.2≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-38239 [HIGH] CWE-1390 CVE-2024-38239: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-30073HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-30073 [HIGH] CWE-41 CVE-2024-30073: Windows Security Zone Mapping Security Feature Bypass Vulnerability Windows Security Zone Mapping Security Feature Bypass Vulnerability
cvelistv5nvd
CVE-2024-38243HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-38243 [HIGH] CWE-20 CVE-2024-38243: Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-38242HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-38242 [HIGH] CWE-122 CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege Vulnerability Kernel Streaming Service Driver Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-38254MEDIUMCVSS 6.2≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-38254 [MEDIUM] CWE-908 CVE-2024-38254: Windows Authentication Information Disclosure Vulnerability Windows Authentication Information Disclosure Vulnerability
cvelistv5nvd
CVE-2024-38235MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-38235 [MEDIUM] CWE-416 Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability
cvelistv5
CVE-2024-38217MEDIUMCVSS 5.4KEV≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-38217 [MEDIUM] CWE-693 CVE-2024-38217: Windows Mark of the Web Security Feature Bypass Vulnerability Windows Mark of the Web Security Feature Bypass Vulnerability
cvelistv5nvd
CVE-2024-38234MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.22000.31972024-09-10
CVE-2024-38234 [MEDIUM] CWE-20 CVE-2024-38234: Windows Networking Denial of Service Vulnerability Windows Networking Denial of Service Vulnerability
cvelistv5nvd
CVE-2024-38163HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.27102024-08-14
CVE-2024-38163 [HIGH] CWE-284 CVE-2024-38163: Windows Update Stack Elevation of Privilege Vulnerability Windows Update Stack Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-38063CRITICALCVSS 9.8PoC≥ 10.0.0, < 10.0.22000.31972024-08-13
CVE-2024-38063 [CRITICAL] CWE-191 CVE-2024-38063: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2024-38199CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.31472024-08-13
CVE-2024-38199 [CRITICAL] CWE-416 CVE-2024-38199: Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2024-38140CRITICALCVSS 9.8≥ 10.0.0, < 10.0.22000.31472024-08-13
CVE-2024-38140 [CRITICAL] CWE-416 CVE-2024-38140: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
cvelistv5nvd
CVE-2024-38136HIGHCVSS 7.0≥ 10.0.0, < 10.0.22000.31472024-08-13
CVE-2024-38136 [HIGH] CWE-416 CVE-2024-38136: Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-38178HIGHCVSS 7.5KEV≥ 10.0.0, < 10.0.22000.31472024-08-13
CVE-2024-38178 [HIGH] CWE-843 Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability
cvelistv5
CVE-2024-38180HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.31472024-08-13
CVE-2024-38180 [HIGH] CWE-693 CVE-2024-38180: Windows SmartScreen Security Feature Bypass Vulnerability Windows SmartScreen Security Feature Bypass Vulnerability
cvelistv5nvd
CVE-2024-38144HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.31472024-08-13
CVE-2024-38144 [HIGH] CWE-190 CVE-2024-38144: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-38186HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.30792024-08-13
CVE-2024-38186 [HIGH] CWE-367 CVE-2024-38186: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2024-38184HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.30792024-08-13
CVE-2024-38184 [HIGH] CWE-125 CVE-2024-38184: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
cvelistv5nvd