Microsoft Windows_11
599 CVEs affecting Microsoft Windows_11. Latest disclosed: 2025-08-26. Critical: 19, High: 435.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-29412 | Critical | 9.8 | 2023-04-18 | CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution… |
CVE-2023-29411 | Critical | 9.8 | 2023-04-18 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remo… |
CVE-2022-42971 | Critical | 9.8 | 2023-02-01 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JS… |
CVE-2022-42970 | Critical | 9.8 | 2023-02-01 | A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identi… |
CVE-2022-34722 | Critical | 9.8 | 2022-09-13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2022-34721 | Critical | 9.8 | 2022-09-13 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2022-34718 | Critical | 9.8 | 2022-09-13 | Windows TCP/IP Remote Code Execution Vulnerability |
CVE-2022-30133 | Critical | 9.8 | 2022-08-09 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
CVE-2022-29130 | Critical | 9.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-22012 | Critical | 9.8 | 2022-05-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2022-26809 | Critical | 9.8 | 2022-04-15 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2022-24497 | Critical | 9.8 | 2022-04-15 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2022-24491 | Critical | 9.8 | 2022-04-15 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2022-21907 | Critical | 9.8 | 2022-01-11 | HTTP Protocol Stack Remote Code Execution Vulnerability |
CVE-2022-21849 | Critical | 9.8 | 2022-01-11 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2021-43215 | Critical | 9.8 | 2021-12-15 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution |
CVE-2025-55526 | Critical | 9.1 | 2025-08-26 | n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function within api_server.py |
CVE-2022-21901 | Critical | 9.0 | 2022-01-11 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2021-26443 | Critical | 9.0 | 2021-11-10 | Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability |
CVE-2022-41048 | High | 8.8 | 2022-11-09 | Microsoft ODBC Driver Remote Code Execution Vulnerability |