VendorsMicrosoftwindows_11all versions
Vulnerabilities

Microsoft Windows 11

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

598CVEs
CVE-2022-21907
HTTP Protocol Stack Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
10.01 PoCEPSS 0.928
CVE-2022-26809
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
10.0EPSS 0.910
CVE-2022-21874
Windows Security Center API Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
10.0EPSS 0.023
CVE-2022-34721
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
9.8EPSS 0.789
CVE-2022-34718
Windows TCP/IP Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
9.8EPSS 0.544
CVE-2022-24497
Windows Network File System Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
9.8EPSS 0.346
CVE-2022-24491
Windows Network File System Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
9.8EPSS 0.335
CVE-2021-43217
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
Published 2021-12-15 · Modified
9.8EPSS 0.064
CVE-2022-21849
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
9.8EPSS 0.062
CVE-2022-22012
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.8EPSS 0.040
CVE-2022-29130
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.8EPSS 0.038
CVE-2022-34722
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
Published 2022-09-13 · Modified
9.8EPSS 0.028
CVE-2021-43215
iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution
Published 2021-12-15 · Modified
9.8EPSS 0.027
CVE-2022-30133
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
Published 2022-08-09 · Modified
9.8EPSS 0.027
CVE-2023-29411
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface.
Published 2023-04-18 · Modified
9.8EPSS 0.013
CVE-2023-29412
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface.
Published 2023-04-18 · Modified
9.8EPSS 0.012
CVE-2022-42971
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JSP file. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)
Published 2023-02-01 · Modified
9.8EPSS 0.011
CVE-2022-42970
A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)
Published 2023-02-01 · Modified
9.8EPSS 0.007
CVE-2022-21972
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.3EPSS 0.793
CVE-2022-23270
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.3EPSS 0.704
CVE-2022-22017
Remote Desktop Client Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.3EPSS 0.371
CVE-2022-21974
Roaming Security Rights Management Services Remote Code Execution Vulnerability
Published 2022-02-09 · Modified
9.3EPSS 0.050
CVE-2022-24492
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
9.3EPSS 0.031
CVE-2022-24541
Windows Server Service Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
9.3EPSS 0.030
CVE-2022-21850
Remote Desktop Client Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
9.3EPSS 0.028
CVE-2022-21851
Remote Desktop Client Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
9.3EPSS 0.028
CVE-2022-26903
Windows Graphics Component Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
9.3EPSS 0.027
CVE-2022-30141
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-06-15 · Modified
9.3EPSS 0.026
CVE-2022-26919
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
9.3EPSS 0.026
CVE-2022-21888
Windows Modern Execution Server Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
9.3EPSS 0.025
CVE-2022-21992
Windows Mobile Device Management Remote Code Execution Vulnerability
Published 2022-02-09 · Modified
9.3EPSS 0.025
CVE-2022-26826
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-04-15 · Modified
9.0EPSS 0.040
CVE-2022-23284
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-03-09 · Modified
9.0EPSS 0.032
CVE-2022-29131
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.0EPSS 0.028
CVE-2022-29128
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.0EPSS 0.028
CVE-2022-29129
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
9.0EPSS 0.028
CVE-2022-21922
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
9.0EPSS 0.028
CVE-2022-21920
Windows Kerberos Elevation of Privilege Vulnerability
Published 2022-01-11 · Modified
9.0EPSS 0.028
CVE-2022-21857
Active Directory Domain Services Elevation of Privilege Vulnerability
Published 2022-01-11 · Modified
9.0EPSS 0.025
CVE-2021-26443
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Published 2021-11-10 · Modified
9.0EPSS 0.017
1 / 15Next →