W1
Product
Windows 11 version 22H3
On CISA KEVExploited in the wildRansomware-linked
1,127
CVEs
54
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 14High 478Medium 8Low 0
Watch
Add Windows 11 version 22H3 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24063 | 7.8 | May 13 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5335 |
| CVE-2025-30388 | 7.8 | May 13 | Windows Graphics Component Remote Code Execution Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5335 |
| CVE-2025-30385 | 7.8 | May 13 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5335 |
| CVE-2025-24062 | 7.8 | Apr 8 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-24060 | 7.8 | Apr 8 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-29811 | 7.8 | Apr 8 | Windows Mobile Broadband Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-29812 | 7.8 | Apr 8 | DirectX Graphics Kernel Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-27739 | 7.8 | Apr 8 | Windows Kernel Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-27730 | 7.8 | Apr 8 | Windows Digital Media Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-27731 | 7.8 | Apr 8 | Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-27729 | 7.8 | Apr 8 | Windows Shell Remote Code Execution Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-27727 | 7.8 | Apr 8 | Windows Installer Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-27490 | 7.8 | Apr 8 | Windows Bluetooth Service Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-27467 | 7.8 | Apr 8 | Windows Digital Media Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-26679 | 7.8 | Apr 8 | RPC Endpoint Mapper Service Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-26675 | 7.8 | Apr 8 | Windows Subsystem for Linux Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-26674 | 7.8 | Apr 8 | Windows Media Remote Code Execution Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-26648 | 7.8 | Apr 8 | Windows Kernel Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-26639 | 7.8 | Apr 8 | Windows USB Print Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-24058 | 7.8 | Apr 8 | Windows DWM Core Library Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-21204 | 7.8 | Apr 8 | Windows Process Activation Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-24073 | 7.8 | Apr 8 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-24074 | 7.8 | Apr 8 | Microsoft DWM Core Library Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-27476 | 7.8 | Apr 8 | Windows Digital Media Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-26688 | 7.8 | Apr 8 | Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-26666 | 7.8 | Apr 8 | Windows Media Remote Code Execution Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5189 |
| CVE-2025-24072 | 7.8 | Mar 11 | Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24067 | 7.8 | Mar 11 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24066 | 7.8 | Mar 11 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24061 | 7.8 | Mar 11 | Windows Mark of the Web Security Feature Bypass Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24059 | 7.8 | Mar 11 | Windows Common Log File System Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24050 | 7.8 | Mar 11 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24048 | 7.8 | Mar 11 | Windows Hyper-V Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24046 | 7.8 | Mar 11 | Kernel Streaming Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24995 | 7.8 | Mar 11 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-21180 | 7.8 | Mar 11 | Windows exFAT File System Remote Code Execution Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-24044 | 7.8 | Mar 11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.5039 |
| CVE-2025-21373 | 7.8 | Feb 11 | Windows Installer Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4890 |
| CVE-2025-21367 | 7.8 | Feb 11 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4890 |
| CVE-2025-21359 | 7.8 | Feb 11 | Windows Kernel Security Feature Bypass Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4890 |
| CVE-2025-21358 | 7.8 | Feb 11 | Windows Core Messaging Elevation of Privileges Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4890 |
| CVE-2025-21420 | 7.8 | Feb 11 | Windows Disk Cleanup Tool Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4890 |
| CVE-2025-21375 | 7.8 | Feb 11 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4890 |
| CVE-2025-21325 | 7.8 | Jan 17 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4751 |
| CVE-2025-21378 | 7.8 | Jan 14 | Windows CSC Service Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4751 |
| CVE-2025-21338 | 7.8 | Jan 14 | GDI+ Remote Code Execution Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4751 |
| CVE-2025-21287 | 7.8 | Jan 14 | Windows Installer Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4751 |
| CVE-2025-21275 | 7.8 | Jan 14 | Windows App Package Installer Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4751 |
| CVE-2025-21382 | 7.8 | Jan 14 | Windows Graphics Component Elevation of Privilege Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4751 |
| CVE-2025-21299 | 7.8 | Jan 14 | Windows Kerberos Security Feature Bypass Vulnerability Affected: 10.0.22631.0 before 10.0.22631.4751 |
The 500 most important CVEs for this product (exploited first, then by severity)