Microsoft Windows 11 Version 22H2 vulnerabilities
1,776 known vulnerabilities affecting microsoft/windows_11_version_22h2.
Total CVEs
1,776
CISA KEV
72
actively exploited
Public exploits
51
Exploited in wild
87
Severity breakdown
CRITICAL42HIGH1247MEDIUM479LOW8
Vulnerabilities
Page 1 of 89
CVE-2021-34527P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.0, < 10.0.22621.6742021-07-02
CVE-2021-34527 [HIGH] CVE-2021-34527: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly pe
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
UPDAT
nvd
CVE-2025-33073P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.54722025-06-10
CVE-2025-33073 [HIGH] CWE-284 CVE-2025-33073: Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a ne
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-21412P1HIGHCVSS 8.1KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.31552024-02-13
CVE-2024-21412 [HIGH] CWE-693 CVE-2024-21412: Internet Shortcut Files Security Feature Bypass Vulnerability
Internet Shortcut Files Security Feature Bypass Vulnerability
nvd
CVE-2023-36025P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.27152023-11-14
CVE-2023-36025 [HIGH] CVE-2023-36025: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2023-36884P1HIGHCVSS 7.5KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.21342023-07-11
CVE-2023-36884 [HIGH] CWE-362 CVE-2023-36884: Windows Search Remote Code Execution Vulnerability
Windows Search Remote Code Execution Vulnerability
nvd
CVE-2025-33053P1HIGHCVSS 8.8KEVPoC≥ 10.0.22621.0, < 10.0.22621.54722025-06-10
CVE-2025-33053 [HIGH] CWE-73 CVE-2025-33053: External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-21338P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.31552024-02-13
CVE-2024-21338 [HIGH] CWE-822 CVE-2024-21338: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-30088P1HIGHCVSS 7.0KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.37372024-06-11
CVE-2024-30088 [HIGH] CWE-367 CVE-2024-30088: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2023-28252P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.15552023-04-11
CVE-2023-28252 [HIGH] CWE-122 CVE-2023-28252: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2013-3900P1HIGHCVSS 8.8KEVPoCRansomwarevN/A2013-12-11
CVE-2013-3900 [HIGH] CWE-347 CVE-2013-3900: Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Upd
Why is Microsoft republishing a CVE from 2013?
We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format is different from the original CVE published in 2013, ex
nvd
CVE-2023-21674P1HIGHCVSS 8.8KEVPoC≥ 10.0.22621.0, < 10.0.22621.11052023-01-10
CVE-2023-21674 [HIGH] CWE-416 CVE-2023-21674: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
nvd
CVE-2025-24054P1MEDIUMCVSS 5.4KEVPoC≥ 10.0.22621.0, < 10.0.22621.50392025-03-11
CVE-2025-24054 [MEDIUM] CWE-73 CVE-2025-24054: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-49039P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.44602024-11-12
CVE-2024-49039 [HIGH] CWE-287 CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
nvd
CVE-2025-30397P1HIGHCVSS 7.5KEVPoC≥ 10.0.22621.0, < 10.0.22621.53352025-05-13
CVE-2025-30397 [HIGH] CWE-843 CVE-2025-30397: Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows a
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-29824P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.51892025-04-08
CVE-2025-29824 [HIGH] CWE-416 CVE-2025-29824: Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-36874P1HIGHCVSS 7.8KEVPoC≥ 10.0.22621.0, < 10.0.22621.19922023-07-11
CVE-2023-36874 [HIGH] CWE-59 CVE-2023-36874: Windows Error Reporting Service Elevation of Privilege Vulnerability
Windows Error Reporting Service Elevation of Privilege Vulnerability
nvd
CVE-2025-26633P1HIGHCVSS 7.0KEVPoCRansomware≥ 10.0.22621.0, < 10.0.22621.50392025-03-11
CVE-2025-26633 [HIGH] CWE-707 CVE-2025-26633: Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2024-49138P1HIGHCVSS 7.8KEVPoC≥ 10.0.22621.0, < 10.0.22621.46022024-12-12
CVE-2024-49138 [HIGH] CWE-122 CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-35250P1HIGHCVSS 7.8KEVPoC≥ 10.0.22621.0, < 10.0.22621.37372024-06-11
CVE-2024-35250 [HIGH] CWE-822 CVE-2024-35250: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38193P1HIGHCVSS 7.8KEVPoC≥ 10.0.22621.0, < 10.0.22621.40372024-08-13
CVE-2024-38193 [HIGH] CWE-416 CVE-2024-38193: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
1 / 89Next →