windows_11_21h2 vulnerabilities
CVEs whose affected-version data names the windows_11_21h2 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
39 CVEsRSS
CVE-2023-23376High· 7.8CISA KEV0dayWindows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-21748High· 7.8PoCWindows Kernel Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2022-37969High· 7.8CISA KEV0dayPoCWindows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2022-30190High· 7.8CISA KEV0dayPoCA remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the c…
CVE-2022-21882High· 7.0CISA KEV0dayPoCWin32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2021-43226High· 7.8CISA KEVPoCWindows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-41379Medium· 5.5CISA KEV0dayWindows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-34527High· 8.8CISA KEVPoCA remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges…
CVE-2013-3900Medium· 5.5CISA KEVPoCWhy is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supp…
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supp…