Microsoft Windows 11 21h2 vulnerabilities

1,001 CVEs affecting Microsoft Windows 11 21h2, 67 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-40733, published 2024-12-18.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
• CVE-2021-34527: Microsoft Windows Print Spooler Remote Code Execution Vulnerability, published 2021-07-02. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 99.8% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run…
• CVE-2024-21412: Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability, published 2024-02-13. High severity, CVSS 8.1. Actively exploited: in CISA KEV since 2024-02-13. EPSS: 99.4% chance of exploitation in the next 30 days. Internet Shortcut Files Security Feature Bypass Vulnerability
• CVE-2022-30190: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability, published 2022-06-01. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-06-14. EPSS: 99.2% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run…
• CVE-2023-36884: Microsoft Windows Search Remote Code Execution Vulnerability, published 2023-07-11. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-07-17. EPSS: 98.9% chance of exploitation in the next 30 days. Windows Search Remote Code Execution Vulnerability
• CVE-2023-36025: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability, published 2023-11-14. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2023-11-14. EPSS: 88.1% chance of exploitation in the next 30 days. Windows SmartScreen Security Feature Bypass Vulnerability
• CVE-2024-38112: Microsoft Windows MSHTML Platform Spoofing Vulnerability, published 2024-07-09. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2024-07-09. EPSS: 84.2% chance of exploitation in the next 30 days. Windows MSHTML Platform Spoofing Vulnerability
• CVE-2022-26923: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability, published 2022-05-10. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-08-18. EPSS: 83.5% chance of exploitation in the next 30 days. Active Directory Domain Services Elevation of Privilege Vulnerability
• CVE-2023-24880: Microsoft Windows SmartScreen Security Feature Bypass Vulnerability, published 2023-03-14. Medium severity, CVSS 4.4. Actively exploited: in CISA KEV since 2023-03-14. EPSS: 78% chance of exploitation in the next 30 days. Windows SmartScreen Security Feature Bypass Vulnerability
• CVE-2022-44698: Microsoft Defender SmartScreen Security Feature Bypass Vulnerability, published 2022-12-13. Medium severity, CVSS 5.4. Actively exploited: in CISA KEV since 2022-12-13. EPSS: 76.3% chance of exploitation in the next 30 days. Windows SmartScreen Security Feature Bypass Vulnerability

Latest

• CVE-2022-40733, published 2024-12-18. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part…
• CVE-2022-40732, published 2024-12-18. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part…
• CVE-2024-43615, published 2024-10-08. High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days. Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
• CVE-2024-43599, published 2024-10-08. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Remote Desktop Client Remote Code Execution Vulnerability
• CVE-2024-43585, published 2024-10-08. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Code Integrity Guard Security Feature Bypass Vulnerability
• CVE-2024-43584, published 2024-10-08. High severity, CVSS 8.4. EPSS: 0.5% chance of exploitation in the next 30 days. Windows Scripting Engine Security Feature Bypass Vulnerability
• CVE-2024-43583, published 2024-10-08. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Winlogon Elevation of Privilege Vulnerability
• CVE-2024-43582, published 2024-10-08. High severity, CVSS 8.1. EPSS: 3.2% chance of exploitation in the next 30 days. Remote Desktop Protocol Server Remote Code Execution Vulnerability
• CVE-2024-43581, published 2024-10-08. High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days. Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
• CVE-2024-43574, published 2024-10-08. High severity, CVSS 8.3. EPSS: 1.2% chance of exploitation in the next 30 days. Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability