# Microsoft Windows 11 version 21H2.

Every CVE that names Microsoft Windows 11 version 21H2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Common Log File System Driver Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-22710.md)
  `CVE-2022-22710` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Feb 2022
- [Windows User Account Profile Picture Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-22002.md)
  `CVE-2022-22002` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Feb 2022
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22001.md)
  `CVE-2022-22001` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2022
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-22000.md)
  `CVE-2022-22000` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21999.md)
  `CVE-2022-21999` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.41 · Not analysed yet · Published 9 Feb 2022 · Tags: Path traversal
- [Windows Common Log File System Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-21998.md)
  `CVE-2022-21998` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Feb 2022
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21997.md)
  `CVE-2022-21997` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Feb 2022
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21996.md)
  `CVE-2022-21996` · CVE record: Microsoft Windows 11 version 21H2 · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2022
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21995.md)
  `CVE-2022-21995` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Feb 2022
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21994.md)
  `CVE-2022-21994` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2022
- [Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-21993.md)
  `CVE-2022-21993` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.44 · Not analysed yet · Published 9 Feb 2022
- [Windows Mobile Device Management Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21992.md)
  `CVE-2022-21992` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2022
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21989.md)
  `CVE-2022-21989` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2022
- [Windows Remote Access Connection Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-21985.md)
  `CVE-2022-21985` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Feb 2022
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21984.md)
  `CVE-2022-21984` · CVE record: Microsoft Windows 10 Version 1909 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Feb 2022
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21981.md)
  `CVE-2022-21981` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2022
- [Roaming Security Rights Management Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21974.md)
  `CVE-2022-21974` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2022
- [Windows Runtime Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21971.md)
  `CVE-2022-21971` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.54 · Not analysed yet · Published 9 Feb 2022 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21963.md)
  `CVE-2022-21963` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21962.md)
  `CVE-2022-21962` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21961.md)
  `CVE-2022-21961` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21960.md)
  `CVE-2022-21960` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21959.md)
  `CVE-2022-21959` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21958.md)
  `CVE-2022-21958` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21928.md)
  `CVE-2022-21928` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 11 Jan 2022
- [Workstation Service Remote Protocol Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-21924.md)
  `CVE-2022-21924` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Jan 2022
- [Remote Procedure Call Runtime Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21922.md)
  `CVE-2022-21922` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Jan 2022
- [Windows Defender Credential Guard Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-21921.md)
  `CVE-2022-21921` · CVE record: Microsoft Windows 10 Version 21H1 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21920.md)
  `CVE-2022-21920` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Jan 2022
- [Windows User Profile Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21919.md)
  `CVE-2022-21919` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Jan 2022 · Tags: Path traversal
- [DirectX Graphics Kernel File Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-21918.md)
  `CVE-2022-21918` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21916.md)
  `CVE-2022-21916` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jan 2022
- [Windows GDI+ Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-21915.md)
  `CVE-2022-21915` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21914.md)
  `CVE-2022-21914` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jan 2022
- [Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass](https://agentprime.io/advisories/CVE-2022-21913.md)
  `CVE-2022-21913` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21908.md)
  `CVE-2022-21908` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jan 2022
- [HTTP Protocol Stack Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21907.md)
  `CVE-2022-21907` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.93 · Not analysed yet · Published 11 Jan 2022
- [Windows Defender Application Control Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-21906.md)
  `CVE-2022-21906` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Hyper-V Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-21905.md)
  `CVE-2022-21905` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21902.md)
  `CVE-2022-21902` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jan 2022
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21901.md)
  `CVE-2022-21901` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jan 2022
- [Windows Hyper-V Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-21900.md)
  `CVE-2022-21900` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21897.md)
  `CVE-2022-21897` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jan 2022
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21896.md)
  `CVE-2022-21896` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Jan 2022
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2022-21894.md)
  `CVE-2022-21894` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 11 Jan 2022 · Tags: Broken access control
- [Remote Desktop Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21893.md)
  `CVE-2022-21893` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.0 High · Not analysed yet · Published 11 Jan 2022
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21892.md)
  `CVE-2022-21892` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-21890.md)
  `CVE-2022-21890` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jan 2022
- [Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-21889.md)
  `CVE-2022-21889` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jan 2022
- [Windows Modern Execution Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21888.md)
  `CVE-2022-21888` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jan 2022
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21887.md)
  `CVE-2022-21887` · CVE record: Microsoft Windows 11 version 21H2 · CVSS 7.0 High · Not analysed yet · Published 11 Jan 2022
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21885.md)
  `CVE-2022-21885` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jan 2022
- [Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-21883.md)
  `CVE-2022-21883` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jan 2022
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21882.md)
  `CVE-2022-21882` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.59 · Not analysed yet · Published 11 Jan 2022 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21881.md)
  `CVE-2022-21881` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.25 · Not analysed yet · Published 11 Jan 2022
- [Windows GDI+ Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-21880.md)
  `CVE-2022-21880` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jan 2022
- [Storage Spaces Controller Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-21877.md)
  `CVE-2022-21877` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Jan 2022
- [Win32k Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-21876.md)
  `CVE-2022-21876` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Jan 2022
- [Windows Security Center API Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2022-21874.md)
  `CVE-2022-21874` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Jan 2022
- [Tile Data Repository Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2022-21873.md)
  `CVE-2022-21873` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Jan 2022

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-21h2.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-21h2.md?cursor=WyIyMDIyLTAxLTExVDIwOjIyOjQyLjAwMDAwMFoiLCJDVkUtMjAyMi0yMTg3MyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-11-version-21h2&cursor=WyIyMDIyLTAyLTA5VDE2OjM3OjAzLjAwMDAwMFoiLCJDVkUtMjAyMi0yMjcxMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-21h2/?cursor=WyIyMDIyLTAyLTA5VDE2OjM3OjAzLjAwMDAwMFoiLCJDVkUtMjAyMi0yMjcxMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.