Microsoft Windows 11 Version 21H2 vulnerabilities

1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.

Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
24
Exploited in wild
77
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4

Vulnerabilities

Page 53 of 78
CVE-2022-37973HIGHCVSS 7.7≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37973 [HIGH] CVE-2022-37973: Windows Local Session Manager (LSM) Denial of Service Vulnerability Windows Local Session Manager (LSM) Denial of Service Vulnerability
nvd
CVE-2022-24504HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-24504 [HIGH] CWE-362 CVE-2022-24504: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-37989HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37989 [HIGH] CVE-2022-37989: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2022-37980HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37980 [HIGH] CVE-2022-37980: Windows DHCP Client Elevation of Privilege Vulnerability Windows DHCP Client Elevation of Privilege Vulnerability
nvd
CVE-2022-38038HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38038 [HIGH] CVE-2022-38038: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-38044HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38044 [HIGH] CVE-2022-38044: Windows CD-ROM File System Driver Remote Code Execution Vulnerability Windows CD-ROM File System Driver Remote Code Execution Vulnerability
nvd
CVE-2022-37978HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37978 [HIGH] CVE-2022-37978: Windows Active Directory Certificate Services Security Feature Bypass Windows Active Directory Certificate Services Security Feature Bypass
nvd
CVE-2022-37998HIGHCVSS 7.7≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37998 [HIGH] CVE-2022-37998: Windows Local Session Manager (LSM) Denial of Service Vulnerability Windows Local Session Manager (LSM) Denial of Service Vulnerability
nvd
CVE-2022-37995HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37995 [HIGH] CVE-2022-37995: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-38047HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38047 [HIGH] CWE-362 CVE-2022-38047: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-38040HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38040 [HIGH] CVE-2022-38040: Microsoft ODBC Driver Remote Code Execution Vulnerability Microsoft ODBC Driver Remote Code Execution Vulnerability
nvd
CVE-2022-38021HIGHCVSS 7.0≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38021 [HIGH] CWE-362 CVE-2022-38021: Connected User Experiences and Telemetry Elevation of Privilege Vulnerability Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
nvd
CVE-2022-38027HIGHCVSS 7.0≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38027 [HIGH] CWE-362 CVE-2022-38027: Windows Storage Elevation of Privilege Vulnerability Windows Storage Elevation of Privilege Vulnerability
nvd
CVE-2022-38028HIGHCVSS 7.8KEV≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38028 [HIGH] CVE-2022-38028: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2022-38039HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38039 [HIGH] CVE-2022-38039: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-38016HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38016 [HIGH] CVE-2022-38016: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
nvd
CVE-2022-33634HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-33634 [HIGH] CWE-362 CVE-2022-33634: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-37988HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37988 [HIGH] CVE-2022-37988: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-33635HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-33635 [HIGH] Windows GDI+ Remote Code Execution Vulnerability Windows GDI+ Remote Code Execution Vulnerability Windows GDI+ Remote Code Execution Vulnerability
cvelistv5
CVE-2022-37991HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37991 [HIGH] CVE-2022-37991: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd