Microsoft Windows 11 Version 22H2 vulnerabilities
1,775 known vulnerabilities affecting microsoft/windows_11_version_22h2.
Total CVEs
1,775
CISA KEV
72
actively exploited
Public exploits
25
Exploited in wild
54
Severity breakdown
CRITICAL42HIGH1246MEDIUM479LOW8
Vulnerabilities
Page 7 of 89
CVE-2025-54103HIGHCVSS 7.4≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54103 [HIGH] CWE-416 CVE-2025-54103: Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges
Use after free in Windows Management Services allows an unauthorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54110HIGHCVSS 8.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54110 [HIGH] CWE-190 CVE-2025-54110: Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54099HIGHCVSS 7.0≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54099 [HIGH] CWE-121 CVE-2025-54099: Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized at
Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-53800HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-53800 [HIGH] CWE-1419 CVE-2025-53800: No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privi
No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54115HIGHCVSS 7.0≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54115 [HIGH] CWE-362 CVE-2025-54115: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54918HIGHCVSS 8.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54918 [HIGH] CWE-287 CVE-2025-54918: Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a n
Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
cvelistv5nvd
CVE-2025-54116HIGHCVSS 7.3≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54116 [HIGH] CWE-284 CVE-2025-54116: Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate priv
Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54916HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54916 [HIGH] CWE-121 CVE-2025-54916: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-49734HIGHCVSS 7.0≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-49734 [HIGH] CWE-923 CVE-2025-49734: Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an
Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-53805HIGHCVSS 7.5≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-53805 [HIGH] CWE-125 CVE-2025-53805: Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny
Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
cvelistv5nvd
CVE-2025-54091HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54091 [HIGH] CWE-122 CVE-2025-54091: Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privilege
Integer overflow or wraparound in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54894HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54894 [HIGH] CWE-122 CVE-2025-54894: Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2025-54911HIGHCVSS 7.3≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54911 [HIGH] CWE-416 CVE-2025-54911: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-53801HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-53801 [HIGH] CWE-822 CVE-2025-53801: Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges loc
Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54912HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54912 [HIGH] CWE-416 CVE-2025-54912: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-53802HIGHCVSS 7.0≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-53802 [HIGH] CWE-416 CVE-2025-53802: Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges loca
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54098HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54098 [HIGH] CWE-284 CVE-2025-54098: Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges local
Improper access control in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-54092HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-54092 [HIGH] CWE-362 CVE-2025-54092: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-55224HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-55224 [HIGH] CWE-362 CVE-2025-55224: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-55228HIGHCVSS 7.8≥ 10.0.22621.0, < 10.0.22621.59092025-09-09
CVE-2025-55228 [HIGH] CWE-362 CVE-2025-55228: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
cvelistv5nvd