Advisories · Technology

Microsoft Windows 11 version 22H2.

Every CVE that names Microsoft Windows 11 version 22H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-36802 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-36803 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 12 Sept 2023
CVE-2023-36804 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-36805 CVE record

CVSS 7.0 High

Windows MSHTML Platform Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Command injection
Not analysed yet 12 Sept 2023
CVE-2023-38139 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38141 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Sept 2023
CVE-2023-38142 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38143 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38144 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 12 Sept 2023
CVE-2023-38146 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows Themes Remote Code Execution Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- Race condition
Not analysed yet 12 Sept 2023
CVE-2023-38147 CVE record

CVSS 8.8 High

Windows Miracast Wireless Display Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38148 CVE record

CVSS 8.8 High

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38149 CVE record

CVSS 7.5 High

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 12 Sept 2023
CVE-2023-38150 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38161 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-35355 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38172 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Aug 2023
CVE-2023-38184 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-38186 CVE record

CVSS 8.8 High

Windows Mobile Device Management Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Authentication bypass
Not analysed yet 8 Aug 2023
CVE-2023-35387 CVE record

CVSS 8.8 High

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35386 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35385 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35384 CVE record

CVSS 5.4 Medium

Windows HTML Platforms Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-35383 CVE record

CVSS 7.5 High

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35382 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35381 CVE record

CVSS 8.8 High

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35380 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35378 CVE record

CVSS 7.0 High

Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
Not analysed yet 8 Aug 2023
CVE-2023-35377 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-38254 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-35376 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-36914 CVE record

CVSS 5.5 Medium

Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
Not analysed yet 8 Aug 2023
CVE-2023-36913 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36912 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-36911 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36910 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36909 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36908 CVE record

CVSS 6.5 Medium

Windows Hyper-V Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 8 Aug 2023
CVE-2023-36907 CVE record

CVSS 5.5 Medium

Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-170
Not analysed yet 8 Aug 2023
CVE-2023-36906 CVE record

CVSS 5.5 Medium

Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-170
Not analysed yet 8 Aug 2023
CVE-2023-36905 CVE record

CVSS 5.5 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36904 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-126
Not analysed yet 8 Aug 2023
CVE-2023-36903 CVE record

CVSS 7.8 High

Windows System Assessment Tool Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-36900 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36898 CVE record

CVSS 7.8 High

Tablet Windows User Interface Application Core Remote Code Execution Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- CWE-426
Not analysed yet 8 Aug 2023
CVE-2023-36889 CVE record

CVSS 5.5 Medium

Windows Group Policy Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 8 Aug 2023
CVE-2023-36882 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35359 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-36884 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Search Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 11 Jul 2023
CVE-2023-36871 CVE record

CVSS 6.5 Medium

Azure Active Directory Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jul 2023
CVE-2023-35312 CVE record

CVSS 7.8 High

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-35309 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35308 CVE record

CVSS 6.5 Medium

Windows MSHTML Platform Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 11 Jul 2023
CVE-2023-35306 CVE record

CVSS 5.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 11 Jul 2023
CVE-2023-35305 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-35304 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-35303 CVE record

CVSS 8.8 High

USB Audio Class System Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 11 Jul 2023
CVE-2023-35302 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-35300 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-35299 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023