Microsoft Windows 11 Version 22H3 vulnerabilities
1,286 known vulnerabilities affecting microsoft/windows_11_version_22h3.
Total CVEs
1,286
CISA KEV
54
actively exploited
Public exploits
34
Exploited in wild
64
Severity breakdown
CRITICAL16HIGH889MEDIUM374LOW7
Vulnerabilities
Page 40 of 65
CVE-2025-53147P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-53147 [HIGH] CWE-416 CVE-2025-53147: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54115P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.59092025-09-09
CVE-2025-54115 [HIGH] CWE-362 CVE-2025-54115: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-29841P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-29841 [HIGH] CWE-362 CVE-2025-29841: Concurrent execution using shared resource with improper synchronization ('race condition') in Unive
Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53137P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-53137 [HIGH] CWE-416 CVE-2025-53137: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54112P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.59092025-09-09
CVE-2025-54112 [HIGH] CWE-416 CVE-2025-54112: Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges l
Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26649P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-26649 [HIGH] CWE-362 CVE-2025-26649: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53718P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-53718 [HIGH] CWE-416 CVE-2025-53718: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53142P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-53142 [HIGH] CWE-416 CVE-2025-53142: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-50167P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-50167 [HIGH] CWE-362 CVE-2025-50167: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-53721P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-53721 [HIGH] CWE-416 CVE-2025-53721: Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevat
Use after free in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-60717P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.61992025-11-11
CVE-2025-60717 [HIGH] CWE-416 CVE-2025-60717: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59515P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.61992025-11-11
CVE-2025-59515 [HIGH] CWE-416 CVE-2025-59515: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-27492P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.51892025-04-08
CVE-2025-27492 [HIGH] CWE-362 CVE-2025-27492: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59202P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-59202 [HIGH] CWE-416 CVE-2025-59202: Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privilege
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55223P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.59092025-09-09
CVE-2025-55223 [HIGH] CWE-362 CVE-2025-55223: Concurrent execution using shared resource with improper synchronization ('race condition') in Graph
Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-54114P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.59092025-09-09
CVE-2025-54114 [HIGH] CWE-362 CVE-2025-54114: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-29960P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-29960 [MEDIUM] CWE-125 CVE-2025-29960: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-29959P3MEDIUMCVSS 6.5≥ 10.0.22631.0, < 10.0.22631.53352025-05-13
CVE-2025-29959 [MEDIUM] CWE-908 CVE-2025-29959: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthor
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2025-53135P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.57682025-08-12
CVE-2025-53135 [HIGH] CWE-362 CVE-2025-53135: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55328P3HIGHCVSS 7.0≥ 10.0.22631.0, < 10.0.22631.60602025-10-14
CVE-2025-55328 [HIGH] CWE-362 CVE-2025-55328: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd