Product by Microsoft
Microsoft Windows 11
575 known vulnerabilities in Microsoft Windows 11 (Microsoft), 1 of them actively exploited (CISA KEV).
Key figures
575
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
17
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-40449 | Win32k Elevation of Privilege Vulnerability In CISA KEVRansomwarealso in 38 other products | 7.8 | |
| Critical | CVE-2022-34721 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2022-26809 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2022-21907 | HTTP Protocol Stack Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2022-34718 | Windows TCP/IP Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2022-24497 | Windows Network File System Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2022-24491 | Windows Network File System Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2022-30216 | Windows Server Service Tampering Vulnerability | 8.8 | |
| High | CVE-2022-41076 | PowerShell Remote Code Execution Vulnerability | 8.5 | |
| High | CVE-2022-22017 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-24500 | Windows SMB Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-37958 | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability | 8.1 | |
| High | CVE-2022-21972 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 | |
| High | CVE-2022-23270 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 | |
| High | CVE-2022-21990 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2023-21768 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 | |
| Critical | CVE-2022-21849 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2023-21758 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | 7.5 | |
| High | CVE-2022-38044 | Windows CD-ROM File System Driver Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2021-38666 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2022-44666 | Windows Contacts Remote Code Execution Vulnerability | 7.8 | |
| High | CVE-2022-37954 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 7.8 | |
| High | CVE-2022-35803 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | 7.8 | |
| High | CVE-2022-34689 | Windows CryptoAPI Spoofing Vulnerability | 7.5 | |
| High | CVE-2022-22025 | Windows Internet Information Services Cachuri Module Denial of Service Vulnerability | 7.5 |