Windows 11 21h2 CVEs and Security Vulnerabilities

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboot. An unprivileged user can run specially-crafted code to trigger Denial Of Service.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Windows 11 21h2 Windows Server and 1 more

CVE-2022-44671

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 8 more

CVE-2022-44670

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-44669

Windows Error Reporting Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 8 more

CVE-2022-41121

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Powershell Remote Desktop Client Windows 10 and 21 more

CVE-2022-41077

Windows Fax Compose Form Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-41076

PowerShell Remote Code Execution Vulnerability

CVSS 3.1 · 8.5 High EPSS 60.8% KEV · Not listed

Vendors

Microsoft

Products

Powershell Windows 10 Windows 10 1507 and 20 more

CVE-2022-41074

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-41094

Windows Hyper-V Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 21 more

CVE-2022-44707

Windows Kernel Denial of Service Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 15 more

CVE-2022-44697

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-44683

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 8.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 15 more

CVE-2022-44682

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 14 more

CVE-2022-44681

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-44680

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 15 more

CVE-2022-44679

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 15 more

CVE-2022-44678

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-44677

Windows Projected File System Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1809 Windows 10 20h2 and 8 more

CVE-2022-44676

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 1.2% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2022-44675

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 5.0% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 18 more

Search vulnerabilities

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Error Reporting Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Fax Compose Form Elevation of Privilege Vulnerability

PowerShell Remote Code Execution Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Kernel Denial of Service Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Windows Projected File System Elevation of Privilege Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability