Microsoft Windows 11 Version 22H3 vulnerabilities
1,286 known vulnerabilities affecting microsoft/windows_11_version_22h3.
Total CVEs
1,286
CISA KEV
54
actively exploited
Public exploits
34
Exploited in wild
64
Severity breakdown
CRITICAL16HIGH889MEDIUM374LOW7
Vulnerabilities
Page 35 of 65
CVE-2025-24994P3HIGHCVSS 7.3≥ 10.0.22631.0, < 10.0.22631.50392025-03-11
CVE-2025-24994 [HIGH] CWE-284 CVE-2025-24994: Improper access control in Windows Cross Device Service allows an authorized attacker to elevate pri
Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-26232P3HIGHCVSS 7.3≥ 10.0.22631.0, < 10.0.22631.34472024-04-09
CVE-2024-26232 [HIGH] CWE-843 CVE-2024-26232: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-43581P3HIGHCVSS 7.1≥ 10.0.22631.0, < 10.0.22631.43172024-10-08
CVE-2024-43581 [HIGH] CWE-73 CVE-2024-43581: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
nvd
CVE-2025-27491P3HIGHCVSS 7.1≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-27491 [HIGH] CWE-416 CVE-2025-27491: Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.
Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.
nvd
CVE-2026-40414P3HIGHCVSS 7.4≥ 10.0.22631.0, < 10.0.22631.70792026-05-12
CVE-2026-40414 [HIGH] CWE-476 CVE-2026-40414: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an a
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.
nvd
CVE-2025-32721P3HIGHCVSS 7.3≥ 10.0.22631.0, < 10.0.22631.54722025-06-10
CVE-2025-32721 [HIGH] CWE-59 CVE-2025-32721: Improper link resolution before file access ('link following') in Windows Recovery Driver allows an
Improper link resolution before file access ('link following') in Windows Recovery Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-50159P3HIGHCVSS 7.3≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-50159 [HIGH] CWE-416 CVE-2025-50159: Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker
Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54116P3HIGHCVSS 7.3≥ 10.0.22631.0, < 10.0.22631.59092025-09-09
CVE-2025-54116 [HIGH] CWE-284 CVE-2025-54116: Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate priv
Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-25004P3HIGHCVSS 7.3≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-25004 [HIGH] CWE-284 CVE-2025-25004: Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21253P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.66492026-02-10
CVE-2026-21253 [HIGH] CWE-416 CVE-2026-21253: Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally.
Use after free in Mailslot File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-21508P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.66492026-02-10
CVE-2026-21508 [HIGH] CWE-287 CVE-2026-21508: Improper authentication in Windows Storage allows an authorized attacker to elevate privileges local
Improper authentication in Windows Storage allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49727P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.56242025-07-08
CVE-2025-49727 [HIGH] CWE-122 CVE-2025-49727: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54099P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.59092025-09-09
CVE-2025-54099 [HIGH] CWE-121 CVE-2025-54099: Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized at
Stack-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-25171P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.67832026-03-10
CVE-2026-25171 [HIGH] CWE-416 CVE-2026-25171: Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-26254P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.34472024-04-09
CVE-2024-26254 [HIGH] CWE-822 CVE-2024-26254: Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
nvd
CVE-2024-21438P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.32962024-03-12
CVE-2024-21438 [HIGH] CWE-369 CVE-2024-21438: Microsoft AllJoyn API Denial of Service Vulnerability
Microsoft AllJoyn API Denial of Service Vulnerability
nvd
CVE-2025-21351P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.48902025-02-11
CVE-2025-21351 [HIGH] CWE-400 CVE-2025-21351: Windows Active Directory Domain Services API Denial of Service Vulnerability
Windows Active Directory Domain Services API Denial of Service Vulnerability
nvd
CVE-2024-49121P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.46022024-12-12
CVE-2024-49121 [HIGH] CWE-476 CVE-2024-49121: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
nvd
CVE-2023-36003P3HIGHCVSS 7.3≥ 10.0.22631.0, < 10.0.22621.28612023-12-12
CVE-2023-36003 [HIGH] CWE-426 CVE-2023-36003: XAML Diagnostics Elevation of Privilege Vulnerability
XAML Diagnostics Elevation of Privilege Vulnerability
nvd
CVE-2024-43515P3HIGHCVSS 7.5≥ 10.0.22631.0, < 10.0.22631.43172024-10-08
CVE-2024-43515 [HIGH] CWE-400 CVE-2024-43515: Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
nvd