W1
Product
Windows 11 version 22H3
On CISA KEVExploited in the wildRansomware-linked
817
CVEs
54
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 11High 481Medium 8Low 0
Watch
Add Windows 11 version 22H3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-50161 | 7.3 | Aug 12 | Win32k Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5768 |
| CVE-2025-50159 | 7.3 | Aug 12 | Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5768 |
| CVE-2025-49682 | 7.3 | Jul 8 | Windows Media Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5624 |
| CVE-2025-49680 | 7.3 | Jul 8 | Windows Performance Recorder (WPR) Denial of Service Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5624 |
| CVE-2025-32721 | 7.3 | Jun 10 | Windows Recovery Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5472 |
| CVE-2025-24994 | 7.3 | Mar 11 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24076 | 7.3 | Mar 11 | Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-21331 | 7.3 | Jan 14 | Windows Installer Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4751 |
| CVE-2024-49107 | 7.3 | Dec 10 | WmsRepair Service Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4602 |
| CVE-2024-43495 | 7.3 | Sep 10 | Windows libarchive Remote Code Execution Vulnerability Affected: 10.0.22631.0 before 10.0.22631.3880 |
| CVE-2024-49089 | 7.2 | Dec 10 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4602 |
| CVE-2024-38239 | 7.2 | Sep 10 | Windows Kerberos Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4169 |
| CVE-2025-59208 | 7.1 | Oct 14 | Windows MapUrlToZone Information Disclosure Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6060 |
| CVE-2025-53139 | 7.1 | Oct 14 | Windows Hello Security Feature Bypass Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6060 |
| CVE-2025-48821 | 7.1 | Jul 8 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5624 |
| CVE-2025-48819 | 7.1 | Jul 8 | Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5624 |
| CVE-2025-29809 | 7.1 | Apr 8 | Windows Kerberos Security Feature Bypass Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-27491 | 7.1 | Apr 8 | Windows Hyper-V Remote Code Execution Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-21419 | 7.1 | Feb 11 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4890 |
| CVE-2026-25179 | 7.0 | Mar 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-25178 | 7.0 | Mar 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-25171 | 7.0 | Mar 10 | Windows Authentication Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-25170 | 7.0 | Mar 10 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-24296 | 7.0 | Mar 10 | Windows Device Association Service Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-24295 | 7.0 | Mar 10 | Windows Device Association Service Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-24285 | 7.0 | Mar 10 | Win32k Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-23671 | 7.0 | Mar 10 | Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-23668 | 7.0 | Mar 10 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-23667 | 7.0 | Mar 10 | Broadcast DVR Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6783 |
| CVE-2026-21237 | 7.0 | Feb 10 | Windows Subsystem for Linux Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6649 |
| CVE-2026-21241 | 7.0 | Feb 10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.6649 |
The 500 most important CVEs for this product (exploited first, then by severity)