Advisories · Technology

Microsoft Windows 11 version 22H2.

Every CVE that names Microsoft Windows 11 version 22H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-26179 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26172 CVE record

CVSS 5.5 Medium

Windows DWM Core Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26256 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Libarchive Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26255 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-26254 CVE record

CVSS 7.5 High

Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26253 CVE record

CVSS 6.8 Medium

Windows rndismp6.sys Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Apr 2024
CVE-2024-26252 CVE record

CVSS 6.8 Medium

Windows rndismp6.sys Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26250 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-20669 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-26185 CVE record

CVSS 6.5 Medium

Windows Compressed Folder Tampering Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Path traversal
Not analysed yet 12 Mar 2024
CVE-2024-26181 CVE record

CVSS 5.5 Medium

Windows Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-26178 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26177 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 12 Mar 2024
CVE-2024-26176 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 12 Mar 2024
CVE-2024-26174 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26173 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-26170 CVE record

CVSS 7.8 High

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-26169 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 12 Mar 2024
CVE-2024-26166 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26162 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
Not analysed yet 12 Mar 2024
CVE-2024-26160 CVE record

CVSS 5.5 Medium

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-126
Not analysed yet 12 Mar 2024
CVE-2024-21440 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21437 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21436 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 12 Mar 2024
CVE-2024-21435 CVE record

CVSS 8.8 High

Windows OLE Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-426
Not analysed yet 12 Mar 2024
CVE-2024-21434 CVE record

CVSS 7.8 High

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21433 CVE record

CVSS 7.0 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Mar 2024
CVE-2024-21432 CVE record

CVSS 7.0 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 12 Mar 2024
CVE-2024-21431 CVE record

CVSS 7.8 High

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Broken access control
Not analysed yet 12 Mar 2024
CVE-2024-21408 CVE record

CVSS 5.5 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 12 Mar 2024
CVE-2024-21407 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26161 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26190 CVE record

CVSS 7.5 High

Microsoft QUIC Denial of Service Vulnerability
- Microsoft Visual Studio 2022 version 17.9
- Microsoft Windows Server 2022
- Denial of service
Not analysed yet 12 Mar 2024
CVE-2024-26159 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21451 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21450 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21446 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 12 Mar 2024
CVE-2024-21445 CVE record

CVSS 7.0 High

Windows USB Print Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21444 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21443 CVE record

CVSS 7.3 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21442 CVE record

CVSS 7.8 High

Windows USB Print Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- CWE-170
Not analysed yet 12 Mar 2024
CVE-2024-21441 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21439 CVE record

CVSS 7.0 High

Windows Telephony Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21438 CVE record

CVSS 7.5 High

Microsoft AllJoyn API Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 12 Mar 2024
CVE-2024-21430 CVE record

CVSS 5.7 Medium

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21429 CVE record

CVSS 6.8 Medium

Windows USB Hub Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21412 CVE record

CVSS 8.1 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Internet Shortcut Files Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-693
Not analysed yet 13 Feb 2024
CVE-2024-21406 CVE record

CVSS 7.5 High

Windows Printing Service Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Weak cryptography or TLS
Not analysed yet 13 Feb 2024
CVE-2024-21405 CVE record

CVSS 7.0 High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 13 Feb 2024
CVE-2024-21391 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 13 Feb 2024
CVE-2024-21377 CVE record

CVSS 5.5 Medium

Windows DNS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 13 Feb 2024
CVE-2024-21370 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21368 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21367 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21365 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21363 CVE record

CVSS 7.8 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21362 CVE record

CVSS 5.5 Medium

Windows Kernel Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 13 Feb 2024
CVE-2024-21359 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21356 CVE record

CVSS 6.5 Medium

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21355 CVE record

CVSS 7.0 High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 13 Feb 2024