Microsoft Windows 11 21H2 vulnerabilities, page 2
997 vulnerabilities
Known vulnerabilities in Microsoft Windows 11 21H2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-26925microsoftwindows_10_1507+36KEV
EPSS score10.48%
Windows LSA Spoofing VulnerabilityCVE-2022-26904microsoftwindows_10_1507+36KEVEPSS score16.95%
Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2022-26923microsoftwindows_10_1507+26KEVEPSS score83.50%
Active Directory Domain Services Elevation of Privilege VulnerabilityCVE-2022-26934microsoft365_apps+42EPSS score3.10%
Windows Graphics Component Information Disclosure VulnerabilityCVE-2022-37969microsoftwindows_10_1507+32KEVRansomwareEPSS score28.27%
Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2022-22047microsoftwindows_10_1507+34KEVEPSS score18.77%
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege VulnerabilityCVE-2022-22718microsoftwindows_10_1507+36KEVEPSS score18.46%
Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-44684microsoftwindows_10_20h2+13EPSS score1.54%
Windows Local Session Manager (LSM) Denial of Service VulnerabilityCVE-2022-44698microsoftwindows_10_1607+16KEVRansomwareEPSS score76.27%
Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2022-24521microsoftwindows_10_1507+36KEVRansomwareEPSS score7.13%
Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2022-30190microsoftwindows_10_1507+31KEVRansomwareEPSS score99.16%
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights.
Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.CVE-2022-34713microsoftwindows_10_1507+31KEVEPSS score67.76%
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityCVE-2022-35754microsoftwindows_10_1507+26EPSS score0.41%
Unified Write Filter Elevation of Privilege VulnerabilityCVE-2022-35755microsoftwindows_10_1507+24EPSS score9.79%
Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-35747microsoftwindows_10_1507+34EPSS score1.68%
Windows Point-to-Point Protocol (PPP) Denial of Service VulnerabilityCVE-2022-35756microsoftwindows_10_1507+30EPSS score11.31%
Windows Kerberos Elevation of Privilege VulnerabilityCVE-2022-35753microsoftwindows_10_1507+33EPSS score1.23%
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2022-35744microsoftwindows_10_1507+33EPSS score1.98%
Windows Point-to-Point Protocol (PPP) Remote Code Execution VulnerabilityCVE-2022-35751microsoftwindows_10_1507+31EPSS score5.46%
Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2022-35743microsoftwindows_10_1507+31EPSS score1.45%
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability