W1
Product
Windows 11 version 22H2
On CISA KEVExploited in the wildRansomware-linked
1,018
CVEs
72
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 14High 474Medium 12Low 0
Watch
Add Windows 11 version 22H2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27490 | 7.8 | Apr 8 | Windows Bluetooth Service Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-27467 | 7.8 | Apr 8 | Windows Digital Media Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-26679 | 7.8 | Apr 8 | RPC Endpoint Mapper Service Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-26675 | 7.8 | Apr 8 | Windows Subsystem for Linux Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-26674 | 7.8 | Apr 8 | Windows Media Remote Code Execution Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-26648 | 7.8 | Apr 8 | Windows Kernel Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-26639 | 7.8 | Apr 8 | Windows USB Print Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-24058 | 7.8 | Apr 8 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-21204 | 7.8 | Apr 8 | Windows Process Activation Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-24073 | 7.8 | Apr 8 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-24074 | 7.8 | Apr 8 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-27476 | 7.8 | Apr 8 | Windows Digital Media Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-26688 | 7.8 | Apr 8 | Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-26666 | 7.8 | Apr 8 | Windows Media Remote Code Execution Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5189 |
| CVE-2025-24072 | 7.8 | Mar 11 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-24067 | 7.8 | Mar 11 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-24066 | 7.8 | Mar 11 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-24061 | 7.8 | Mar 11 | Windows Mark of the Web Security Feature Bypass Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-24059 | 7.8 | Mar 11 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-24050 | 7.8 | Mar 11 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-24048 | 7.8 | Mar 11 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-24046 | 7.8 | Mar 11 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-24995 | 7.8 | Mar 11 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-21180 | 7.8 | Mar 11 | Windows exFAT File System Remote Code Execution Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-24044 | 7.8 | Mar 11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.5039 |
| CVE-2025-21373 | 7.8 | Feb 11 | Windows Installer Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4890 |
| CVE-2025-21367 | 7.8 | Feb 11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4890 |
| CVE-2025-21359 | 7.8 | Feb 11 | Windows Kernel Security Feature Bypass Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4890 |
| CVE-2025-21358 | 7.8 | Feb 11 | Windows Core Messaging Elevation of Privileges Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4890 |
| CVE-2025-21420 | 7.8 | Feb 11 | Windows Disk Cleanup Tool Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4890 |
| CVE-2025-21375 | 7.8 | Feb 11 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4890 |
| CVE-2025-21325 | 7.8 | Jan 17 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2025-21378 | 7.8 | Jan 14 | Windows CSC Service Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2025-21338 | 7.8 | Jan 14 | GDI+ Remote Code Execution Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2025-21287 | 7.8 | Jan 14 | Windows Installer Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2025-21275 | 7.8 | Jan 14 | Windows App Package Installer Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2025-21382 | 7.8 | Jan 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2025-21299 | 7.8 | Jan 14 | Windows Kerberos Security Feature Bypass Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2025-21281 | 7.8 | Jan 14 | Microsoft COM for Windows Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2025-21235 | 7.8 | Jan 14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2025-21234 | 7.8 | Jan 14 | Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4751 |
| CVE-2024-49114 | 7.8 | Dec 10 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4602 |
| CVE-2024-49090 | 7.8 | Dec 10 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4602 |
| CVE-2024-49088 | 7.8 | Dec 10 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4602 |
| CVE-2024-49079 | 7.8 | Dec 10 | Input Method Editor (IME) Remote Code Execution Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4602 |
| CVE-2024-49076 | 7.8 | Dec 10 | Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4602 |
| CVE-2024-49072 | 7.8 | Dec 10 | Windows Task Scheduler Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4602 |
| CVE-2024-43641 | 7.8 | Nov 12 | Windows Registry Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4460 |
| CVE-2024-43640 | 7.8 | Nov 12 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4460 |
| CVE-2024-43636 | 7.8 | Nov 12 | Win32k Elevation of Privilege Vulnerability Affected: 10.0.22621.0 before 10.0.22621.4460 |
The 500 most important CVEs for this product (exploited first, then by severity)