Advisories · Technology

Microsoft Windows 11 version 21H2.

Every CVE that names Microsoft Windows 11 version 21H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-36711 CVE record

CVSS 7.8 High

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 10 Oct 2023
CVE-2023-36712 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-36713 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36717 CVE record

CVSS 6.5 Medium

Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-36718 CVE record

CVSS 7.8 High

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36720 CVE record

CVSS 7.5 High

Windows Mixed Reality Developer Tools Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-36721 CVE record

CVSS 7.0 High

Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 10 Oct 2023
CVE-2023-36722 CVE record

CVSS 4.4 Medium

Active Directory Domain Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 Oct 2023
CVE-2023-36723 CVE record

CVSS 7.8 High

Windows Container Manager Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 10 Oct 2023
CVE-2023-36724 CVE record

CVSS 5.5 Medium

Windows Power Management Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Authentication bypass
Not analysed yet 10 Oct 2023
CVE-2023-36725 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 Oct 2023
CVE-2023-36726 CVE record

CVSS 7.8 High

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36729 CVE record

CVSS 7.8 High

Named Pipe File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36731 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Oct 2023
CVE-2023-36732 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-41774 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41773 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41772 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 Oct 2023
CVE-2023-41771 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41770 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41769 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41768 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41767 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41766 CVE record

CVSS 7.8 High

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-426
Not analysed yet 10 Oct 2023
CVE-2023-41765 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36902 CVE record

CVSS 7.0 High

Windows Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-35349 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Oct 2023
CVE-2023-38160 CVE record

CVSS 5.5 Medium

Windows TCP/IP Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-36802 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-36803 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 12 Sept 2023
CVE-2023-36804 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-36805 CVE record

CVSS 7.0 High

Windows MSHTML Platform Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Command injection
Not analysed yet 12 Sept 2023
CVE-2023-38139 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38140 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38141 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Sept 2023
CVE-2023-38142 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38143 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38144 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 12 Sept 2023
CVE-2023-38146 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows Themes Remote Code Execution Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- Race condition
Not analysed yet 12 Sept 2023
CVE-2023-38147 CVE record

CVSS 8.8 High

Windows Miracast Wireless Display Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38148 CVE record

CVSS 8.8 High

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38149 CVE record

CVSS 7.5 High

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 12 Sept 2023
CVE-2023-38150 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38161 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-35355 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38172 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Aug 2023
CVE-2023-38184 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-38186 CVE record

CVSS 8.8 High

Windows Mobile Device Management Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Authentication bypass
Not analysed yet 8 Aug 2023
CVE-2023-35387 CVE record

CVSS 8.8 High

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35386 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35385 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35384 CVE record

CVSS 5.4 Medium

Windows HTML Platforms Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-35383 CVE record

CVSS 7.5 High

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35382 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35381 CVE record

CVSS 8.8 High

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35380 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35378 CVE record

CVSS 7.0 High

Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
Not analysed yet 8 Aug 2023
CVE-2023-35377 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-38254 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-35376 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023