# Microsoft Windows 11 version 21H2.

Every CVE that names Microsoft Windows 11 version 21H2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22041.md)
  `CVE-2022-22041` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Jul 2022
- [Internet Information Services Dynamic Compression Module Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-22040.md)
  `CVE-2022-22040` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.3 High · Not analysed yet · Published 12 Jul 2022
- [Remote Procedure Call Runtime Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-22038.md)
  `CVE-2022-22038` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 12 Jul 2022
- [Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22037.md)
  `CVE-2022-22037` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Jul 2022
- [Performance Counters for Windows Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22036.md)
  `CVE-2022-22036` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Jul 2022
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22034.md)
  `CVE-2022-22034` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jul 2022
- [Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22031.md)
  `CVE-2022-22031` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jul 2022
- [Windows Fax Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-22027.md)
  `CVE-2022-22027` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jul 2022
- [Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22026.md)
  `CVE-2022-22026` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Jul 2022 · Tags: Memory corruption
- [Windows Internet Information Services Cachuri Module Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-22025.md)
  `CVE-2022-22025` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.33 · Not analysed yet · Published 12 Jul 2022
- [Windows Fax Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-22024.md)
  `CVE-2022-22024` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jul 2022
- [Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-22023.md)
  `CVE-2022-22023` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 12 Jul 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22022.md)
  `CVE-2022-22022` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.1 High · Not analysed yet · Published 12 Jul 2022
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-21845.md)
  `CVE-2022-21845` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 12 Jul 2022
- [Local Security Authority Subsystem Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30166.md)
  `CVE-2022-30166` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jun 2022
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30165.md)
  `CVE-2022-30165` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 Jun 2022
- [Kerberos AppContainer Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-30164.md)
  `CVE-2022-30164` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jun 2022
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30163.md)
  `CVE-2022-30163` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-30162.md)
  `CVE-2022-30162` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Jun 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30161.md)
  `CVE-2022-30161` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 Jun 2022
- [Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30160.md)
  `CVE-2022-30160` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jun 2022
- [Windows Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-30155.md)
  `CVE-2022-30155` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Jun 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30153.md)
  `CVE-2022-30153` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 Jun 2022
- [Windows Network Address Translation (NAT) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-30152.md)
  `CVE-2022-30152` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30151.md)
  `CVE-2022-30151` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 15 Jun 2022
- [Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30150.md)
  `CVE-2022-30150` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30149.md)
  `CVE-2022-30149` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows Desired State Configuration (DSC) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-30148.md)
  `CVE-2022-30148` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Jun 2022
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30147.md)
  `CVE-2022-30147` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jun 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30146.md)
  `CVE-2022-30146` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows Encrypting File System (EFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30145.md)
  `CVE-2022-30145` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30143.md)
  `CVE-2022-30143` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows File History Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30142.md)
  `CVE-2022-30142` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30141.md)
  `CVE-2022-30141` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 15 Jun 2022
- [Windows iSCSI Discovery Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30140.md)
  `CVE-2022-30140` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30139.md)
  `CVE-2022-30139` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2022
- [Windows Container Manager Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30132.md)
  `CVE-2022-30132` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 15 Jun 2022
- [Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-30190.md)
  `CVE-2022-30190` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.98 · Not analysed yet · Published 1 Jun 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-30138.md)
  `CVE-2022-30138` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 18 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29141.md)
  `CVE-2022-29141` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Print Spooler Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-29140.md)
  `CVE-2022-29140` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29139.md)
  `CVE-2022-29139` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29137.md)
  `CVE-2022-29137` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29133.md)
  `CVE-2022-29133` · CVE record: Microsoft Windows 11 version 21H2 · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29132.md)
  `CVE-2022-29132` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29131.md)
  `CVE-2022-29131` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29130.md)
  `CVE-2022-29130` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29129.md)
  `CVE-2022-29129` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29128.md)
  `CVE-2022-29128` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 May 2022
- [BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-29127.md)
  `CVE-2022-29127` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.2 Medium · Not analysed yet · Published 10 May 2022
- [Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29126.md)
  `CVE-2022-29126` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 May 2022
- [Windows Push Notifications Apps Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29125.md)
  `CVE-2022-29125` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 May 2022
- [Windows WLAN AutoConfig Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-29121.md)
  `CVE-2022-29121` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-29116.md)
  `CVE-2022-29116` · CVE record: Microsoft Windows 11 version 21H2 · CVSS 4.7 Medium · Not analysed yet · Published 10 May 2022
- [Windows Fax Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-29115.md)
  `CVE-2022-29115` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022
- [Windows Print Spooler Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-29114.md)
  `CVE-2022-29114` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Digital Media Receiver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29113.md)
  `CVE-2022-29113` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022
- [Windows Graphics Component Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-29112.md)
  `CVE-2022-29112` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 May 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29104.md)
  `CVE-2022-29104` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.12 · Not analysed yet · Published 10 May 2022
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-29103.md)
  `CVE-2022-29103` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 May 2022

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-21h2.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-21h2.md?cursor=WyIyMDIyLTA1LTEwVDIwOjM0OjA0LjAwMDAwMFoiLCJDVkUtMjAyMi0yOTEwMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-11-version-21h2&cursor=WyIyMDIyLTA3LTEyVDIyOjM3OjExLjAwMDAwMFoiLCJDVkUtMjAyMi0yMjA0MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-21h2/?cursor=WyIyMDIyLTA3LTEyVDIyOjM3OjExLjAwMDAwMFoiLCJDVkUtMjAyMi0yMjA0MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.