Advisories · Technology

Microsoft Windows 11 version 22H2.

Every CVE that names Microsoft Windows 11 version 22H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-21411 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2024-49105 CVE record

CVSS 8.4 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- Broken access control
Not analysed yet 10 Dec 2024
CVE-2024-49138 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49127 CVE record

CVSS 8.1 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49118 CVE record

CVSS 8.1 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49114 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-820
Not analysed yet 10 Dec 2024
CVE-2024-49113 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49112 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49110 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49109 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49095 CVE record

CVSS 7.0 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49090 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49088 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 10 Dec 2024
CVE-2024-49083 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49082 CVE record

CVSS 6.8 Medium

Windows File Explorer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 10 Dec 2024
CVE-2024-49081 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49080 CVE record

CVSS 8.8 High

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49079 CVE record

CVSS 7.8 High

Input Method Editor (IME) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49078 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49077 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49076 CVE record

CVSS 7.8 High

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Authentication bypass
Not analysed yet 10 Dec 2024
CVE-2024-49075 CVE record

CVSS 7.5 High

Windows Remote Desktop Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 10 Dec 2024
CVE-2024-49072 CVE record

CVSS 7.8 High

Windows Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49132 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49126 CVE record

CVSS 8.1 High

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49124 CVE record

CVSS 8.1 High

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 10 Dec 2024
CVE-2024-49123 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49122 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49121 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49117 CVE record

CVSS 8.8 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-393
Not analysed yet 10 Dec 2024
CVE-2024-49111 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49107 CVE record

CVSS 7.3 High

WmsRepair Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- Broken access control
Not analysed yet 10 Dec 2024
CVE-2024-49104 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49103 CVE record

CVSS 4.3 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49102 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49101 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49099 CVE record

CVSS 4.3 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49098 CVE record

CVSS 4.3 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49097 CVE record

CVSS 7.0 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49096 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 10 Dec 2024
CVE-2024-49094 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49092 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49089 CVE record

CVSS 7.2 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49087 CVE record

CVSS 4.6 Medium

Windows Mobile Broadband Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 10 Dec 2024
CVE-2024-49084 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 10 Dec 2024
CVE-2024-49073 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 10 Dec 2024
CVE-2024-49039 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Nov 2024
CVE-2024-38203 CVE record

CVSS 6.2 Medium

Windows Package Library Manager Information Disclosure Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- CWE-693
Not analysed yet 12 Nov 2024
CVE-2024-43642 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows SMB Denial of Service Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43641 CVE record

CVSS 7.8 High

Windows Registry Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43640 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43636 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43635 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43633 CVE record

CVSS 6.5 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-591
Not analysed yet 12 Nov 2024
CVE-2024-43629 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43624 CVE record

CVSS 8.8 High

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43622 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43621 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43620 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49046 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Nov 2024