Advisories · Technology

Microsoft Windows 11 version 21H2.

Every CVE that names Microsoft Windows 11 version 21H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-22710 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22002 CVE record

CVSS 5.5 Medium

Windows User Account Profile Picture Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22001 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22000 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21999 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 9 Feb 2022
CVE-2022-21998 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21997 CVE record

CVSS 7.1 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21996 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 21H2
Not analysed yet 9 Feb 2022
CVE-2022-21995 CVE record

CVSS 7.9 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21994 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21993 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21992 CVE record

CVSS 7.8 High

Windows Mobile Device Management Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21989 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21985 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21984 CVE record

CVSS 8.8 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 9 Feb 2022
CVE-2022-21981 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21974 CVE record

CVSS 7.8 High

Roaming Security Rights Management Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21971 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Feb 2022
CVE-2022-21963 CVE record

CVSS 6.4 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21962 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21961 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21960 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21959 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21958 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21928 CVE record

CVSS 6.3 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21924 CVE record

CVSS 5.3 Medium

Workstation Service Remote Protocol Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21922 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21921 CVE record

CVSS 4.4 Medium

Windows Defender Credential Guard Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 11 Jan 2022
CVE-2022-21920 CVE record

CVSS 8.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21919 CVE record

CVSS 7.0 HighCritical · KEVKEV

Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 11 Jan 2022
CVE-2022-21918 CVE record

CVSS 6.5 Medium

DirectX Graphics Kernel File Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21916 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21915 CVE record

CVSS 6.5 Medium

Windows GDI+ Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21914 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21913 CVE record

CVSS 5.3 Medium

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21908 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21907 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

HTTP Protocol Stack Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21906 CVE record

CVSS 5.5 Medium

Windows Defender Application Control Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21905 CVE record

CVSS 4.6 Medium

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21902 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21901 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21900 CVE record

CVSS 4.6 Medium

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21897 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21896 CVE record

CVSS 7.0 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21894 CVE record

CVSS 4.4 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 11 Jan 2022
CVE-2022-21893 CVE record

CVSS 8.0 High

Remote Desktop Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21892 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21890 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21889 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21888 CVE record

CVSS 7.8 High

Windows Modern Execution Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21887 CVE record

CVSS 7.0 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 21H2
Not analysed yet 11 Jan 2022
CVE-2022-21885 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21883 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21882 CVE record

CVSS 7.0 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jan 2022
CVE-2022-21881 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21880 CVE record

CVSS 7.5 High

Windows GDI+ Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21877 CVE record

CVSS 5.5 Medium

Storage Spaces Controller Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21876 CVE record

CVSS 5.5 Medium

Win32k Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21874 CVE record

CVSS 7.8 High

Windows Security Center API Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21873 CVE record

CVSS 7.0 High

Tile Data Repository Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022