# Microsoft Windows 11 version 22H2.

Every CVE that names Microsoft Windows 11 version 22H2 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20674.md)
  `CVE-2024-20674` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-305
- [BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-20666.md)
  `CVE-2024-20666` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-20
- [Windows Local Session Manager (LSM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2022-44684.md)
  `CVE-2022-44684` · CVE record: Microsoft Windows 10 Version 21H1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Dec 2023
- [Windows Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-35635.md)
  `CVE-2023-35635` · CVE record: Microsoft Windows 11 version 22H2 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows Bluetooth Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35634.md)
  `CVE-2023-35634` · CVE record: Microsoft Windows 11 version 21H2 and 3 more · CVSS 8.0 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35631.md)
  `CVE-2023-35631` · CVE record: Microsoft Windows 11 version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023
- [Internet Connection Sharing (ICS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35630.md)
  `CVE-2023-35630` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows MSHTML Platform Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35628.md)
  `CVE-2023-35628` · CVE record: Microsoft Windows 11 Version 23H2 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.93 · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows Sysmain Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-35644.md)
  `CVE-2023-35644` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-35642.md)
  `CVE-2023-35642` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-682
- [Internet Connection Sharing (ICS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35641.md)
  `CVE-2023-35641` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-682
- [Microsoft ODBC Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-35639.md)
  `CVE-2023-35639` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36006.md)
  `CVE-2023-36006` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows Telephony Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36005.md)
  `CVE-2023-36005` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.24 · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-591
- [Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2023-36004.md)
  `CVE-2023-36004` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Dec 2023 · Tags: Authentication bypass
- [XAML Diagnostics Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36003.md)
  `CVE-2023-36003` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Dec 2023 · Tags: CWE-426
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-21740.md)
  `CVE-2023-21740` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36011.md)
  `CVE-2023-36011` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36696.md)
  `CVE-2023-36696` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Dec 2023 · Tags: Memory corruption
- [Windows SmartScreen Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2023-36025.md)
  `CVE-2023-36025` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.88 · Not analysed yet · Published 14 Nov 2023
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36033.md)
  `CVE-2023-36033` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.11 · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36028.md)
  `CVE-2023-36028` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36047.md)
  `CVE-2023-36047` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: Path traversal
- [Windows Authentication Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-36046.md)
  `CVE-2023-36046` · CVE record: Microsoft Windows 11 version 21H2 and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Nov 2023 · Tags: Path traversal
- [Windows User Interface Application Core Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36393.md)
  `CVE-2023-36393` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-426
- [Windows Compressed Folder Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36396.md)
  `CVE-2023-36396` · CVE record: Microsoft Windows 11 version 22H2 and 2 more · CVSS 7.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-41
- [Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36397.md)
  `CVE-2023-36397` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.18 · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-126
- [Windows NTFS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36398.md)
  `CVE-2023-36398` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36399.md)
  `CVE-2023-36399` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Nov 2023 · Tags: Path traversal
- [Windows HMAC Key Derivation Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36400.md)
  `CVE-2023-36400` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Microsoft Remote Registry Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36401.md)
  `CVE-2023-36401` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.2 High · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36402.md)
  `CVE-2023-36402` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36403.md)
  `CVE-2023-36403` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-591
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36404.md)
  `CVE-2023-36404` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: Broken access control
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36405.md)
  `CVE-2023-36405` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Nov 2023 · Tags: Race condition
- [Windows Hyper-V Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36406.md)
  `CVE-2023-36406` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-20
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36407.md)
  `CVE-2023-36407` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-20
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36408.md)
  `CVE-2023-36408` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Windows Scripting Engine Memory Corruption Vulnerability](https://agentprime.io/advisories/CVE-2023-36017.md)
  `CVE-2023-36017` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.25 · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36036.md)
  `CVE-2023-36036` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.17 · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Microsoft Remote Registry Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36423.md)
  `CVE-2023-36423` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36424.md)
  `CVE-2023-36424` · CVE record: Microsoft Windows 11 version 22H3 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.12 · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Windows Distributed File System (DFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36425.md)
  `CVE-2023-36425` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.0 High · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36427.md)
  `CVE-2023-36427` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Nov 2023
- [Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36428.md)
  `CVE-2023-36428` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: Memory corruption
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36705.md)
  `CVE-2023-36705` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: Path traversal
- [Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36719.md)
  `CVE-2023-36719` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-20
- [Windows MSHTML Platform Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36436.md)
  `CVE-2023-36436` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Oct 2023
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36743.md)
  `CVE-2023-36743` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36776.md)
  `CVE-2023-36776` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-38159.md)
  `CVE-2023-38159` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-591
- [Layer 2 Tunneling Protocol Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-38166.md)
  `CVE-2023-38166` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption
- [Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2023-36431.md)
  `CVE-2023-36431` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2023 · Tags: Denial of service
- [Windows IIS Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2023-36434.md)
  `CVE-2023-36434` · CVE record: Microsoft Windows 10 Version 22H2 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2023 · Tags: Authentication bypass
- [Windows TCP/IP Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36438.md)
  `CVE-2023-36438` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2023
- [PrintHTML API Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36557.md)
  `CVE-2023-36557` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Oct 2023
- [Microsoft WordPad Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36563.md)
  `CVE-2023-36563` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.20 · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-20
- [Windows Search Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2023-36564.md)
  `CVE-2023-36564` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2023
- [Windows Deployment Services Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2023-36567.md)
  `CVE-2023-36567` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2023 · Tags: Memory corruption
- [Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-36570.md)
  `CVE-2023-36570` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.3 High · Not analysed yet · Published 10 Oct 2023 · Tags: Code injection

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-22h2.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-22h2.md?cursor=WyIyMDIzLTEwLTEwVDE3OjA3OjU4LjY5MDAwMFoiLCJDVkUtMjAyMy0zNjU3MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-11-version-22h2&cursor=WyIyMDI0LTAxLTA5VDE3OjU2OjQ3LjI4MzAwMFoiLCJDVkUtMjAyNC0yMDY1NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-11-version-22h2/?cursor=WyIyMDI0LTAxLTA5VDE3OjU2OjQ3LjI4MzAwMFoiLCJDVkUtMjAyNC0yMDY1NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.