Microsoft Windows 11 Version 22H3 vulnerabilities

1,286 known vulnerabilities affecting microsoft/windows_11_version_22h3.

Total CVEs

1,286

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL16HIGH889MEDIUM374LOW7

Vulnerabilities

SortPage 22 of 65

CVE-2025-24074P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-24074 [HIGH] CWE-20 CVE-2025-24074: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privi Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-24060P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-24060 [HIGH] CWE-20 CVE-2025-24060: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privi Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-24073P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-24073 [HIGH] CWE-20 CVE-2025-24073: Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privi Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

nvd

CVE-2024-37982P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.43172024-10-08

CVE-2024-37982 [HIGH] CWE-822 CVE-2024-37982: Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

nvd

CVE-2025-24046P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.50392025-03-11

CVE-2025-24046 [HIGH] CWE-416 CVE-2025-24046: Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges lo Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-50176P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.57682025-08-12

CVE-2025-50176 [HIGH] CWE-122 CVE-2025-50176: Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorize Access of resource using incompatible type ('type confusion') in Graphics Kernel allows an authorized attacker to execute code locally.

nvd

CVE-2025-60707P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.61992025-11-11

CVE-2025-60707 [HIGH] CWE-416 CVE-2025-60707: Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevat Use after free in Multimedia Class Scheduler Service (MMCSS) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-54912P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.59092025-09-09

CVE-2025-54912 [HIGH] CWE-416 CVE-2025-54912: Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally. Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-32712P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.54722025-06-10

CVE-2025-32712 [HIGH] CWE-416 CVE-2025-32712: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59201P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.60602025-10-14

CVE-2025-59201 [HIGH] CWE-284 CVE-2025-59201: Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53152P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.57682025-08-12

CVE-2025-53152 [HIGH] CWE-416 CVE-2025-53152: Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally. Use after free in Desktop Windows Manager allows an authorized attacker to execute code locally.

nvd

CVE-2025-50153P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.57682025-08-12

CVE-2025-50153 [HIGH] CWE-416 CVE-2025-50153: Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locall Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49761P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.57682025-08-12

CVE-2025-49761 [HIGH] CWE-416 CVE-2025-49761: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53151P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.57682025-08-12

CVE-2025-53151 [HIGH] CWE-416 CVE-2025-53151: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49675P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.56242025-07-08

CVE-2025-49675 [HIGH] CWE-416 CVE-2025-49675: Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-23673P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.67832026-03-10

CVE-2026-23673 [HIGH] CWE-125 CVE-2026-23673: Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-62571P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.63452025-12-09

CVE-2025-62571 [HIGH] CWE-20 CVE-2025-62571: Improper input validation in Windows Installer allows an authorized attacker to elevate privileges l Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49726P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.56242025-07-08

CVE-2025-49726 [HIGH] CWE-416 CVE-2025-49726: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59277P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.60602025-10-14

CVE-2025-59277 [HIGH] CWE-1287 CVE-2025-59277: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-64673P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.63452025-12-09

CVE-2025-64673 [HIGH] CWE-284 CVE-2025-64673: Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges lo Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally.

nvd

← Previous22 / 65Next →