Microsoft Windows 11 Version 21H2 vulnerabilities

1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.

Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
24
Exploited in wild
77
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4

Vulnerabilities

Page 54 of 78
CVE-2022-37984HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37984 [HIGH] CVE-2022-37984: Windows WLAN Service Elevation of Privilege Vulnerability Windows WLAN Service Elevation of Privilege Vulnerability
nvd
CVE-2022-38003HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38003 [HIGH] CVE-2022-38003: Windows Resilient File System Elevation of Privilege Windows Resilient File System Elevation of Privilege
nvd
CVE-2022-38045HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38045 [HIGH] CVE-2022-38045: Windows Server Service Elevation of Privilege Vulnerability Windows Server Service Elevation of Privilege Vulnerability
nvd
CVE-2022-38046HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38046 [HIGH] CVE-2022-38046: Web Account Manager Information Disclosure Vulnerability Web Account Manager Information Disclosure Vulnerability
nvd
CVE-2022-38050HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38050 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-37982HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37982 [HIGH] CVE-2022-37982: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-37993HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37993 [HIGH] CVE-2022-37993: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2022-41081HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-41081 [HIGH] CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-37983HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37983 [HIGH] CVE-2022-37983: Microsoft DWM Core Library Elevation of Privilege Vulnerability Microsoft DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-37986HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37986 [HIGH] CVE-2022-37986: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2022-38036HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38036 [HIGH] CVE-2022-38036: Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
nvd
CVE-2022-38037HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38037 [HIGH] CVE-2022-38037: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2022-22035HIGHCVSS 8.1≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-22035 [HIGH] CWE-362 CVE-2022-22035: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-37970HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37970 [HIGH] CVE-2022-37970: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-38031HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38031 [HIGH] CVE-2022-38031: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
nvd
CVE-2022-41033HIGHCVSS 7.8KEV≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-41033 [HIGH] CWE-843 CVE-2022-41033: Windows COM+ Event System Service Elevation of Privilege Vulnerability Windows COM+ Event System Service Elevation of Privilege Vulnerability
nvd
CVE-2022-37987HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37987 [HIGH] CVE-2022-37987: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2022-38042HIGHCVSS 7.1≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38042 [HIGH] CVE-2022-38042: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2022-37994HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-37994 [HIGH] CVE-2022-37994: Windows Group Policy Preference Client Elevation of Privilege Vulnerability Windows Group Policy Preference Client Elevation of Privilege Vulnerability
nvd
CVE-2022-38034HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.10982022-10-11
CVE-2022-38034 [HIGH] CVE-2022-38034: Windows Workstation Service Elevation of Privilege Vulnerability Windows Workstation Service Elevation of Privilege Vulnerability
nvd