Microsoft Windows 11 Version 22H3 vulnerabilities

1,286 known vulnerabilities affecting microsoft/windows_11_version_22h3.

Total CVEs

1,286

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL16HIGH889MEDIUM374LOW7

Vulnerabilities

SortPage 24 of 65

CVE-2024-20682P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.30072024-01-09

CVE-2024-20682 [HIGH] CWE-822 CVE-2024-20682: Windows Cryptographic Services Remote Code Execution Vulnerability Windows Cryptographic Services Remote Code Execution Vulnerability

nvd

CVE-2024-38057P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.38802024-07-09

CVE-2024-38057 [HIGH] CWE-125 CVE-2024-38057: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

nvd

CVE-2025-21375P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.48902025-02-11

CVE-2025-21375 [HIGH] CWE-20 CVE-2025-21375: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

nvd

CVE-2025-27476P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-27476 [HIGH] CWE-416 CVE-2025-27476: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-27467P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-27467 [HIGH] CWE-416 CVE-2025-27467: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-27730P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-27730 [HIGH] CWE-415 CVE-2025-27730: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-33075P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.54722025-06-10

CVE-2025-33075 [HIGH] CWE-59 CVE-2025-33075: Improper link resolution before file access ('link following') in Windows Installer allows an author Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-24044P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.50392025-03-11

CVE-2025-24044 [HIGH] CWE-416 CVE-2025-24044: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-29811P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-29811 [HIGH] CWE-20 CVE-2025-29811: Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privi Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-26679P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.51892025-04-08

CVE-2025-26679 [HIGH] CWE-416 CVE-2025-26679: Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges lo Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49667P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.56242025-07-08

CVE-2025-49667 [HIGH] CWE-415 CVE-2025-49667: Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49721P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.56242025-07-08

CVE-2025-49721 [HIGH] CWE-122 CVE-2025-49721: Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate pri Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally.

nvd

CVE-2025-24072P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.50392025-03-11

CVE-2025-24072 [HIGH] CWE-416 CVE-2025-24072: Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker t Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-60709P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.61992025-11-11

CVE-2025-60709 [HIGH] CWE-125 CVE-2025-60709: Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-48815P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.56242025-07-08

CVE-2025-48815 [HIGH] CWE-843 CVE-2025-48815: Access of resource using incompatible type ('type confusion') in Windows SSDP Service allows an auth Access of resource using incompatible type ('type confusion') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-54102P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.59092025-09-09

CVE-2025-54102 [HIGH] CWE-416 CVE-2025-54102: Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevat Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53726P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.57682025-08-12

CVE-2025-53726 [HIGH] CWE-843 CVE-2025-53726: Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows a Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-53724P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.57682025-08-12

CVE-2025-53724 [HIGH] CWE-843 CVE-2025-53724: Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows a Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-47976P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.56242025-07-08

CVE-2025-47976 [HIGH] CWE-416 CVE-2025-47976: Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally. Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-21232P3HIGHCVSS 7.8≥ 10.0.22631.0, < 10.0.22631.66492026-02-10

CVE-2026-21232 [HIGH] CWE-822 CVE-2026-21232: Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privilege Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

nvd

← Previous24 / 65Next →