Microsoft Windows 11 Version 21H2 vulnerabilities

1,560 known vulnerabilities affecting microsoft/windows_11_version_21h2.

Total CVEs
1,560
CISA KEV
67
actively exploited
Public exploits
24
Exploited in wild
77
Severity breakdown
CRITICAL51HIGH1137MEDIUM368LOW4

Vulnerabilities

Page 72 of 78
CVE-2022-21919HIGHCVSS 7.0KEVPoC≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21919 [HIGH] CWE-59 CVE-2022-21919: Windows User Profile Service Elevation of Privilege Vulnerability Windows User Profile Service Elevation of Privilege Vulnerability
nvd
CVE-2022-21866HIGHCVSS 7.0≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21866 [HIGH] CVE-2022-21866: Windows System Launcher Elevation of Privilege Vulnerability Windows System Launcher Elevation of Privilege Vulnerability
nvd
CVE-2022-21889HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21889 [HIGH] CVE-2022-21889: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
nvd
CVE-2022-21890HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21890 [HIGH] CVE-2022-21890: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
nvd
CVE-2022-21888HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21888 [HIGH] CVE-2022-21888: Windows Modern Execution Server Remote Code Execution Vulnerability Windows Modern Execution Server Remote Code Execution Vulnerability
nvd
CVE-2022-21850HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21850 [HIGH] CVE-2022-21850: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2022-21833HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21833 [HIGH] CVE-2022-21833: Virtual Machine IDE Drive Elevation of Privilege Vulnerability Virtual Machine IDE Drive Elevation of Privilege Vulnerability
nvd
CVE-2022-21848HIGHCVSS 7.5≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21848 [HIGH] CVE-2022-21848: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
nvd
CVE-2022-21908HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21908 [HIGH] CVE-2022-21908: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2022-21902HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21902 [HIGH] CWE-269 CVE-2022-21902: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-21882HIGHCVSS 7.0KEVPoC≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21882 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2022-21834HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21834 [HIGH] CVE-2022-21834: Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21905HIGHCVSS 8.0≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21905 [HIGH] CVE-2022-21905: Windows Hyper-V Security Feature Bypass Vulnerability Windows Hyper-V Security Feature Bypass Vulnerability
nvd
CVE-2022-21862HIGHCVSS 7.0≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21862 [HIGH] CVE-2022-21862: Windows Application Model Core API Elevation of Privilege Vulnerability Windows Application Model Core API Elevation of Privilege Vulnerability
nvd
CVE-2022-21836HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21836 [HIGH] Windows Certificate Spoofing Vulnerability Windows Certificate Spoofing Vulnerability Windows Certificate Spoofing Vulnerability
cvelistv5
CVE-2022-21871HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21871 [HIGH] CVE-2022-21871: Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
nvd
CVE-2022-21896HIGHCVSS 7.0≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21896 [HIGH] CWE-362 CVE-2022-21896: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-21922HIGHCVSS 8.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21922 [HIGH] CVE-2022-21922: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-21852HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21852 [HIGH] CWE-119 CVE-2022-21852: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-21885HIGHCVSS 7.8≥ 10.0.0, < 10.0.22000.4342022-01-11
CVE-2022-21885 [HIGH] CVE-2022-21885: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd