Windows 11 22h2 vulnerabilities

133 known vulnerabilities in Windows 11 22h2 from Microsoft. 121 are rated high or critical, and 74 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  TPM2.0: Out-of-bounds Write

  CVE-2023-1017Feb 28, 2023Trusted Computing GroupEPSS 1.38%

  An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of s

• 7.8 High severity

  Microsoft Windows Graphic Component Privilege Escalation Exploited

  CVE-2023-21823Feb 14, 2023MicrosoftEPSS 5.56%

  Windows Graphics Component Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited

  CVE-2023-23376Feb 14, 2023MicrosoftEPSS 10.8%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Exploited

  CVE-2023-21674Jan 10, 2023MicrosoftEPSS 34.2%

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows Scripting Languages Remote Code Execution Exploited

  CVE-2022-41128Nov 9, 2022MicrosoftEPSS 24.6%

  Windows Scripting Languages Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Windows CNG Key Isolation Service Privilege Escalation Exploited

  CVE-2022-41125Nov 9, 2022MicrosoftEPSS 3.05%

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

• 5.4 Medium severity

  Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited

  CVE-2022-41091Nov 9, 2022MicrosoftEPSS 2.25%

  Windows Mark of the Web Security Feature Bypass Vulnerability

• 7.8 High severity

  Microsoft Windows Print Spooler Privilege Escalation Exploited

  CVE-2022-41073Nov 9, 2022MicrosoftEPSS 2.63%

  Windows Print Spooler Elevation of Privilege Vulnerability

• 5.4 Medium severity

  Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited

  CVE-2022-41049Nov 9, 2022MicrosoftEPSS 3.27%

  Windows Mark of the Web Security Feature Bypass Vulnerability

• 7.8 High severity

  Microsoft Windows COM+ Event System Service Privilege Escalation Exploited

  CVE-2022-41033Oct 11, 2022MicrosoftEPSS 1.89%

  Windows COM+ Event System Service Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Print Spooler Privilege Escalation Exploited

  CVE-2022-38028Oct 11, 2022MicrosoftEPSS 14.9%

  Windows Print Spooler Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows Print Spooler Remote Code Execution Exploited

  CVE-2021-34527Jul 2, 2021MicrosoftEPSS 99.8%

  A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could the

• 8.8 High severity

  Microsoft WinVerifyTrust function Remote Code Execution Exploited

  CVE-2013-3900Dec 11, 2013MicrosoftEPSS 44.6%

  Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windo