Advisories · Technology

Microsoft Windows 11 version 21H2.

Every CVE that names Microsoft Windows 11 version 21H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-28270 CVE record

CVSS 6.8 Medium

Windows Lock Screen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 11 Apr 2023
CVE-2023-28246 CVE record

CVSS 7.8 High

Windows Registry Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Broken access control
Not analysed yet 11 Apr 2023
CVE-2023-28269 CVE record

CVSS 6.2 Medium

Windows Boot Manager Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28267 CVE record

CVSS 6.5 Medium

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 11 Apr 2023
CVE-2023-28243 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28266 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 11 Apr 2023
CVE-2023-28241 CVE record

CVSS 7.5 High

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-28238 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28237 CVE record

CVSS 7.8 High

Windows Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28236 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28234 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
Not analysed yet 11 Apr 2023
CVE-2023-28233 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
Not analysed yet 11 Apr 2023
CVE-2023-28232 CVE record

CVSS 7.5 High

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 11 Apr 2023
CVE-2023-28229 CVE record

CVSS 7.0 HighCritical · KEVKEV

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28228 CVE record

CVSS 5.5 Medium

Windows Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 11 Apr 2023
CVE-2023-28227 CVE record

CVSS 7.5 High

Windows Bluetooth Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28226 CVE record

CVSS 5.3 Medium

Windows Enroll Engine Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 20H2
- Weak cryptography or TLS
Not analysed yet 11 Apr 2023
CVE-2023-28225 CVE record

CVSS 7.8 High

Windows NTLM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28224 CVE record

CVSS 7.1 High

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28220 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28219 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-24929 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24887 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24928 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24886 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24927 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24885 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24926 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24884 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
Not analysed yet 11 Apr 2023
CVE-2023-24925 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24883 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 11 Apr 2023
CVE-2023-24924 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24912 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21554 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 11 Apr 2023
CVE-2023-28298 CVE record

CVSS 5.5 Medium

Windows Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-28297 CVE record

CVSS 8.8 High

Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28222 CVE record

CVSS 7.1 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 11 Apr 2023
CVE-2023-28221 CVE record

CVSS 7.0 High

Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 11 Apr 2023
CVE-2023-28218 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28217 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 11 Apr 2023
CVE-2023-28216 CVE record

CVSS 7.0 High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Apr 2023
CVE-2023-24931 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21769 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21729 CVE record

CVSS 4.3 Medium

Remote Procedure Call Runtime Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-21727 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24880 CVE record

CVSS 4.4 MediumCritical · KEVKEV · ransomware

Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 14 Mar 2023
CVE-2023-24876 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24913 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24872 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24871 CVE record

CVSS 8.8 High

Windows Bluetooth Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 20H2
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24911 CVE record

CVSS 4.3 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24870 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 14 Mar 2023
CVE-2023-24910 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24909 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24869 CVE record

CVSS 8.1 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24908 CVE record

CVSS 8.1 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24868 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24907 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24867 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023
CVE-2023-24906 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023