cbcvebase.

Microsoft Windows 11 Version 22H2 vulnerabilities

1,776 known vulnerabilities affecting microsoft/windows_11_version_22h2.

Total CVEs
1,776
CISA KEV
72
actively exploited
Public exploits
51
Exploited in wild
87
Severity breakdown
CRITICAL42HIGH1247MEDIUM479LOW8

Vulnerabilities

Page 34 of 89
CVE-2025-54895P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54895 [HIGH] CWE-190 CVE-2025-54895: Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38119P3HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.41692024-09-10
CVE-2024-38119 [HIGH] CWE-416 CVE-2024-38119: Windows Network Address Translation (NAT) Remote Code Execution Vulnerability Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
nvd
CVE-2024-30092P3HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.43172024-10-08
CVE-2024-30092 [HIGH] CWE-20 CVE-2024-30092: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2025-48004P3HIGHCVSS 7.0≥ 10.0.22621.0, < 10.0.22621.60602025-10-14
CVE-2025-48004 [HIGH] CWE-416 CVE-2025-48004: Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privile Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-24932MEDIUMCVSS 6.7Exploited≥ 10.0.22621.0, < 10.0.22621.56242023-05-09
CVE-2023-24932 [MEDIUM] Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability Secure Boot Security Feature Bypass Vulnerability
cvelistv5
CVE-2025-54103P3HIGHCVSS 7.4≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54103 [HIGH] CWE-416 CVE-2025-54103: Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2023-35387P3HIGHCVSS 8.8≥ 10.0.22621.0, < 10.0.22621.21342023-08-08
CVE-2023-35387 [HIGH] CWE-191 CVE-2023-35387: Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
nvd
CVE-2022-38016P3HIGHCVSS 8.8≥ 10.0.22621.0, < 10.0.22621.6742022-10-11
CVE-2022-38016 [HIGH] CVE-2022-38016: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
nvd
CVE-2023-32009P3HIGHCVSS 8.8≥ 10.0.22621.0, < 10.0.22621.18482023-06-14
CVE-2023-32009 [HIGH] CWE-284 CVE-2023-32009: Windows Collaborative Translation Framework Elevation of Privilege Vulnerability Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
nvd
CVE-2024-21371P3HIGHCVSS 7.0≥ 10.0.22621.0, < 10.0.22621.31552024-02-13
CVE-2024-21371 [HIGH] CWE-367 CVE-2024-21371: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-43584P3HIGHCVSS 8.4≥ 10.0.22621.0, < 10.0.22621.43172024-10-08
CVE-2024-43584 [HIGH] CWE-693 CVE-2024-43584: Windows Scripting Engine Security Feature Bypass Vulnerability Windows Scripting Engine Security Feature Bypass Vulnerability
nvd
CVE-2023-36407P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.27152023-11-14
CVE-2023-36407 [HIGH] CWE-20 CVE-2023-36407: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2023-36396P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.27152023-11-14
CVE-2023-36396 [HIGH] CWE-41 CVE-2023-36396: Windows Compressed Folder Remote Code Execution Vulnerability Windows Compressed Folder Remote Code Execution Vulnerability
nvd
CVE-2024-38127P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.40372024-08-13
CVE-2024-38127 [HIGH] CWE-126 CVE-2024-38127: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2025-27473P3HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.51892025-04-08
CVE-2025-27473 [HIGH] CWE-400 CVE-2025-27473: Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny servic Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-38184P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.38802024-08-13
CVE-2024-38184 [HIGH] CWE-125 CVE-2024-38184: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-36047P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.27152023-11-14
CVE-2023-36047 [HIGH] CWE-59 CVE-2023-36047: Windows Authentication Elevation of Privilege Vulnerability Windows Authentication Elevation of Privilege Vulnerability
nvd
CVE-2024-49090P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.46022024-12-12
CVE-2024-49090 [HIGH] CWE-822 CVE-2024-49090: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49088P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.46022024-12-12
CVE-2024-49088 [HIGH] CWE-126 CVE-2024-49088: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-26173P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.32962024-03-12
CVE-2024-26173 [HIGH] CWE-20 CVE-2024-26173: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
Microsoft Windows 11 Version 22H2 vulnerabilities | cvebase