Advisories · Technology

Microsoft Windows 11 version 21H2.

Every CVE that names Microsoft Windows 11 version 21H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-26940 CVE record

CVSS 6.5 Medium

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows Server 2022
Not analysed yet 10 May 2022
CVE-2022-26936 CVE record

CVSS 6.5 Medium

Windows Server Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26935 CVE record

CVSS 6.5 Medium

Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26934 CVE record

CVSS 6.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26933 CVE record

CVSS 5.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26931 CVE record

CVSS 7.5 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26930 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26927 CVE record

CVSS 8.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26926 CVE record

CVSS 7.8 High

Windows Address Book Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 May 2022
CVE-2022-26925 CVE record

CVSS 8.1 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows LSA Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Authentication bypass
Not analysed yet 10 May 2022
CVE-2022-26923 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 10 May 2022
CVE-2022-26913 CVE record

CVSS 7.4 High

Windows Authentication Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-24466 CVE record

CVSS 4.1 Medium

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-23279 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 10 May 2022
CVE-2022-23270 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22019 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22017 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows Server 2022
Not analysed yet 10 May 2022
CVE-2022-22016 CVE record

CVSS 7.0 High

Windows PlayToManager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22015 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22014 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22013 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22012 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-21972 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26920 CVE record

CVSS 5.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26919 CVE record

CVSS 8.1 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26918 CVE record

CVSS 7.8 High

Windows Fax Compose Form Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26917 CVE record

CVSS 7.8 High

Windows Fax Compose Form Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26916 CVE record

CVSS 7.8 High

Windows Fax Compose Form Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26915 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26914 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26904 CVE record

CVSS 7.0 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 15 Apr 2022
CVE-2022-26831 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26830 CVE record

CVSS 7.5 High

DiskUsage.exe Remote Code Execution Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
Not analysed yet 15 Apr 2022
CVE-2022-26826 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Command injection
Not analysed yet 15 Apr 2022
CVE-2022-26809 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26808 CVE record

CVSS 7.0 High

Windows File Explorer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26807 CVE record

CVSS 7.0 High

Windows Work Folder Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 15 Apr 2022
CVE-2022-26803 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26802 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26801 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26798 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26797 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26796 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26795 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 15 Apr 2022
CVE-2022-26794 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26793 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26792 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26790 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26789 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26787 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-26786 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24550 CVE record

CVSS 7.8 High

Windows Telephony Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24549 CVE record

CVSS 7.8 High

Windows AppX Package Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24547 CVE record

CVSS 7.8 High

Windows Digital Media Receiver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24546 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24545 CVE record

CVSS 8.1 High

Windows Kerberos Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24544 CVE record

CVSS 7.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24542 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24541 CVE record

CVSS 8.8 High

Windows Server Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24540 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 15 Apr 2022