W1
Product
Windows 11 version 21H2
On CISA KEVExploited in the wildRansomware-linked
1,000
CVEs
67
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 35High 454Medium 11Low 0
Watch
Add Windows 11 version 21H2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-41765 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: before 10.0.22000.2538 |
| CVE-2023-38166 | 8.1 | Oct 10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: before 10.0.22000.2538 |
| CVE-2023-35297 | 8.1 | Jul 11 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Affected: before 10.0.22000.2176 |
| CVE-2023-29351 | 8.1 | Jun 14 | Windows Group Policy Elevation of Privilege Vulnerability Affected: before 10.0.22000.2057 |
| CVE-2022-35753 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: before 10.0.22000.856; before 10.0.22000.856 |
| CVE-2022-35752 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: before 10.0.22000.856; before 10.0.22000.856 |
| CVE-2022-35745 | 8.1 | May 31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: before 10.0.22000.856 |
| CVE-2023-28283 | 8.1 | May 9 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Affected: before 10.0.22000.1936 |
| CVE-2023-21712 | 8.1 | Apr 27 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: before 10.0.22000.1219 |
| CVE-2023-28220 | 8.1 | Apr 11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: before 10.0.22000.1817 |
| CVE-2023-28219 | 8.1 | Apr 11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability Affected: before 10.0.22000.1817 |
| CVE-2023-24908 | 8.1 | Mar 14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: before 10.0.22000.1696 |
| CVE-2023-24869 | 8.1 | Mar 14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: before 10.0.22000.1696 |
| CVE-2023-23405 | 8.1 | Mar 14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability Affected: before 10.0.22000.1696 |
| CVE-2023-23404 | 8.1 | Mar 14 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Affected: before 10.0.22000.1696 |
| CVE-2023-21679 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21556 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21555 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21548 | 8.1 | Jan 10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21546 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21543 | 8.1 | Jan 10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2023-21535 | 8.1 | Jan 10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Affected: All versions, or not specified |
| CVE-2024-38011 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-38010 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37989 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37988 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37987 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37986 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37981 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37977 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37975 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37974 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37972 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37971 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37970 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-37969 | 8.0 | Jul 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.3079 |
| CVE-2024-30077 | 8.0 | Jun 11 | Windows OLE Remote Code Execution Vulnerability Affected: before 10.0.22000.3019 |
| CVE-2024-28925 | 8.0 | Apr 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.2899 |
| CVE-2024-26240 | 8.0 | Apr 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.2899 |
| CVE-2024-26189 | 8.0 | Apr 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.2899 |
| CVE-2024-26180 | 8.0 | Apr 9 | Secure Boot Security Feature Bypass Vulnerability Affected: before 10.0.22000.2899 |
| CVE-2024-20654 | 8.0 | Jan 9 | Microsoft ODBC Driver Remote Code Execution Vulnerability Affected: before 10.0.22000.2713; before 10.0.22000.2713 |
| CVE-2023-36425 | 8.0 | Nov 14 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability Affected: before 10.0.22000.2600 |
| CVE-2023-36697 | 8.0 | Oct 10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: before 10.0.22000.2538; before 10.0.22000.2538 |
| CVE-2019-0887 | 8.0 | Jul 15 | A remote code execution vulnerability exists in Remote Desktop Services - formerly known as Terminal Services - when an authenticated attacker abuses clipboard redirection, aka… Affected: 10.0.22000.376 |
| CVE-2024-43583 | 7.8 | Oct 8 | Winlogon Elevation of Privilege Vulnerability Affected: before 10.0.22000.3260; before 10.0.22000.3260 |
| CVE-2024-43563 | 7.8 | Oct 8 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: before 10.0.22000.3260 |
| CVE-2024-43560 | 7.8 | Oct 8 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability Affected: before 10.0.22000.3260 |
| CVE-2024-43556 | 7.8 | Oct 8 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: before 10.0.22000.3260 |
| CVE-2024-43551 | 7.8 | Oct 8 | Windows Storage Elevation of Privilege Vulnerability Affected: before 10.0.22000.3260 |
The 500 most important CVEs for this product (exploited first, then by severity)