Microsoft Windows 11 Version 22H2 vulnerabilities
1,776 known vulnerabilities affecting microsoft/windows_11_version_22h2.
Total CVEs
1,776
CISA KEV
72
actively exploited
Public exploits
51
Exploited in wild
87
Severity breakdown
CRITICAL42HIGH1247MEDIUM479LOW8
Vulnerabilities
Page 36 of 89
CVE-2024-26248P3HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.34472024-04-09
CVE-2024-26248 [HIGH] CWE-303 CVE-2024-26248: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2024-38239P3HIGHCVSS 7.2≥ 10.0.22621.0, < 10.0.22621.41692024-09-10
CVE-2024-38239 [HIGH] CWE-1390 CVE-2024-38239: Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2023-28232P3HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.15552023-04-11
CVE-2023-28232 [HIGH] CWE-362 CVE-2023-28232: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2024-26234MEDIUMCVSS 6.7Exploited≥ 10.0.22621.0, < 10.0.22621.34472024-04-09
CVE-2024-26234 [MEDIUM] CWE-284 Proxy Driver Spoofing Vulnerability
Proxy Driver Spoofing Vulnerability
Proxy Driver Spoofing Vulnerability
cvelistv5
CVE-2024-38198P3HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.40372024-08-13
CVE-2024-38198 [HIGH] CWE-345 CVE-2024-38198: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2024-38078P3HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.38802024-07-09
CVE-2024-38078 [HIGH] CWE-416 CVE-2024-38078: Xbox Wireless Adapter Remote Code Execution Vulnerability
Xbox Wireless Adapter Remote Code Execution Vulnerability
nvd
CVE-2024-20666MEDIUMCVSS 6.6Exploited≥ 10.0.22621.0, < 10.0.22621.30072024-01-09
CVE-2024-20666 [MEDIUM] CWE-20 BitLocker Security Feature Bypass Vulnerability
BitLocker Security Feature Bypass Vulnerability
BitLocker Security Feature Bypass Vulnerability
cvelistv5
CVE-2023-35387P3HIGHCVSS 8.8≥ 10.0.22621.0, < 10.0.22621.21342023-08-08
CVE-2023-35387 [HIGH] CWE-191 CVE-2023-35387: Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
nvd
CVE-2024-21371P3HIGHCVSS 7.0≥ 10.0.22621.0, < 10.0.22621.31552024-02-13
CVE-2024-21371 [HIGH] CWE-367 CVE-2024-21371: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-38064P3HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.38802024-07-09
CVE-2024-38064 [HIGH] CWE-908 CVE-2024-38064: Windows TCP/IP Information Disclosure Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
nvd
CVE-2025-27473P3HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.51892025-04-08
CVE-2025-27473 [HIGH] CWE-400 CVE-2025-27473: Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny servic
Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-43625P3HIGHCVSS 8.1≥ 10.0.22621.0, < 10.0.22621.44602024-11-12
CVE-2024-43625 [HIGH] CWE-416 CVE-2024-43625: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
nvd
CVE-2023-41766P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.24282023-10-10
CVE-2023-41766 [HIGH] CWE-426 CVE-2023-41766: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
nvd
CVE-2024-29050P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.34472024-04-09
CVE-2024-29050 [HIGH] CWE-197 CVE-2024-29050: Windows Cryptographic Services Remote Code Execution Vulnerability
Windows Cryptographic Services Remote Code Execution Vulnerability
nvd
CVE-2024-49076P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.46022024-12-12
CVE-2024-49076 [HIGH] CWE-287 CVE-2024-49076: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
nvd
CVE-2023-35356P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.19922023-07-11
CVE-2023-35356 [HIGH] CWE-843 CVE-2023-35356: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2024-30086P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.37372024-06-11
CVE-2024-30086 [HIGH] CWE-416 CVE-2024-30086: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2024-38051P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.38802024-07-09
CVE-2024-38051 [HIGH] CWE-122 CVE-2024-38051: Windows Graphics Component Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2024-30095P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.37372024-06-11
CVE-2024-30095 [HIGH] CWE-122 CVE-2024-30095: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49079P3HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.46022024-12-12
CVE-2024-49079 [HIGH] CWE-416 CVE-2024-49079: Input Method Editor (IME) Remote Code Execution Vulnerability
Input Method Editor (IME) Remote Code Execution Vulnerability
nvd