Microsoft Windows 11 Version 22H3 vulnerabilities
1,286 known vulnerabilities affecting microsoft/windows_11_version_22h3.
Total CVEs
1,286
CISA KEV
54
actively exploited
Public exploits
34
Exploited in wild
64
Severity breakdown
CRITICAL16HIGH889MEDIUM374LOW7
Vulnerabilities
Page 1 of 65
CVE-2025-33073P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.54722025-06-10
CVE-2025-33073 [HIGH] CWE-284 CVE-2025-33073: Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a ne
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2024-21412P1HIGHCVSS 8.1KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.31552024-02-13
CVE-2024-21412 [HIGH] CWE-693 CVE-2024-21412: Internet Shortcut Files Security Feature Bypass Vulnerability
Internet Shortcut Files Security Feature Bypass Vulnerability
nvd
CVE-2023-36025P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.27152023-11-14
CVE-2023-36025 [HIGH] CVE-2023-36025: Windows SmartScreen Security Feature Bypass Vulnerability
Windows SmartScreen Security Feature Bypass Vulnerability
nvd
CVE-2025-33053P1HIGHCVSS 8.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.54722025-06-10
CVE-2025-33053 [HIGH] CWE-73 CVE-2025-33053: External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-21338P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.31552024-02-13
CVE-2024-21338 [HIGH] CWE-822 CVE-2024-21338: Windows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2013-3900P1HIGHCVSS 8.8KEVPoCRansomwarevN/A2013-12-11
CVE-2013-3900 [HIGH] CWE-347 CVE-2013-3900: Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Upd
Why is Microsoft republishing a CVE from 2013?
We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the format is different from the original CVE published in 2013, ex
nvd
CVE-2025-24054P1MEDIUMCVSS 5.4KEVPoC≥ 10.0.22631.0, < 10.0.22631.50392025-03-11
CVE-2025-24054 [MEDIUM] CWE-73 CVE-2025-24054: External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-29824P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-29824 [HIGH] CWE-416 CVE-2025-29824: Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-30397P1HIGHCVSS 7.5KEVPoC≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-30397 [HIGH] CWE-843 CVE-2025-30397: Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows a
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49039P1HIGHCVSS 8.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.44602024-11-12
CVE-2024-49039 [HIGH] CWE-287 CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
nvd
CVE-2025-26633P1HIGHCVSS 7.0KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.50392025-03-11
CVE-2025-26633 [HIGH] CWE-707 CVE-2025-26633: Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2024-49138P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49138 [HIGH] CWE-122 CVE-2024-49138: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38193P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.40372024-08-13
CVE-2024-38193 [HIGH] CWE-416 CVE-2024-38193: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2024-30051P1HIGHCVSS 7.8KEVPoCRansomware≥ 10.0.22631.0, < 10.0.22631.35932024-05-14
CVE-2024-30051 [HIGH] CWE-122 CVE-2024-30051: Windows DWM Core Library Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2025-21333P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.47512025-01-14
CVE-2025-21333 [HIGH] CWE-122 CVE-2025-21333: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
nvd
CVE-2025-62215P1HIGHCVSS 7.0KEVPoC≥ 10.0.22631.0, < 10.0.22631.61992025-11-11
CVE-2025-62215 [HIGH] CWE-362 CVE-2025-62215: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2023-36424P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.27152023-11-14
CVE-2023-36424 [HIGH] CWE-125 CVE-2023-36424: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-38080P1HIGHCVSS 7.8KEVPoC≥ 10.0.22631.0, < 10.0.22631.38802024-07-09
CVE-2024-38080 [HIGH] CWE-190 CVE-2024-38080: Windows Hyper-V Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2026-21510P1HIGHCVSS 8.8KEV≥ 10.0.22631.0, < 10.0.22631.66492026-02-10
CVE-2026-21510 [HIGH] CWE-693 CVE-2026-21510: Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security f
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2024-43572P1HIGHCVSS 7.8KEV≥ 10.0.22631.0, < 10.0.22631.43172024-10-08
CVE-2024-43572 [HIGH] CWE-707 CVE-2024-43572: Microsoft Management Console Remote Code Execution Vulnerability
Microsoft Management Console Remote Code Execution Vulnerability
nvd
1 / 65Next →