[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZOyEzDbkz8YLr6j9rmyfEa9ar44fCIHQ57YeNXed854":3,"g5a-family:microsoft\u002Fwindows_11_22h2":625,"g5a-ex:microsoft\u002Fwindows_11_22h2@*":626},{"success":4,"data":5},true,{"product":6,"versions":156,"topVulnerabilitiesByEpss":226,"kevVulnerabilities":281,"seoMetadata":603,"meta":622},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":155},"microsoft","windows_11_22h2",69,1473,73,"2025-10-14",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22000.1413",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22000.1702",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1105",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1194",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1265",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1344",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1413",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1485",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1555",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1635",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1702",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1778",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1848",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1928",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.1992",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.2070",{"version":49,"cve_count":50,"kev_count":16,"has_kev":17},"10.0.22621.2134",1,{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.2215",{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.2275",{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.2283",{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.2361",{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.2428",{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.2715",{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.2861",{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3007",{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3085",{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3155",{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3235",{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3296",{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3374",{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3447",{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3527",{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3593",{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3672",{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3737",{"version":88,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3810",{"version":90,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3880",{"version":92,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.3958",{"version":94,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4037",{"version":96,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4112",{"version":98,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4169",{"version":100,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4249",{"version":102,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4317",{"version":104,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4391",{"version":106,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4460",{"version":108,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4541",{"version":110,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4602",{"version":112,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4751",{"version":114,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.4890",{"version":116,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.5039",{"version":118,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.5189",{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.5191",{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.521",{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.525",{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.5335",{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.5472",{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.5624",{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.5768",{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.5900",{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.5909",{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.6060",{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.608",{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.674",{"version":144,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.675",{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.755",{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.819",{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.900",{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22621.963",{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.22631.5191","Windows 11 22h2 by Microsoft is a technology product with 69 tracked versions and 1473 known security vulnerabilities including 73 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":50,"kev_count":16,"has_kev":17},{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},{"version":56,"cve_count":16,"kev_count":16,"has_kev":17},{"version":58,"cve_count":16,"kev_count":16,"has_kev":17},{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},{"version":88,"cve_count":16,"kev_count":16,"has_kev":17},{"version":90,"cve_count":16,"kev_count":16,"has_kev":17},{"version":92,"cve_count":16,"kev_count":16,"has_kev":17},{"version":94,"cve_count":16,"kev_count":16,"has_kev":17},{"version":96,"cve_count":16,"kev_count":16,"has_kev":17},{"version":98,"cve_count":16,"kev_count":16,"has_kev":17},{"version":100,"cve_count":16,"kev_count":16,"has_kev":17},{"version":102,"cve_count":16,"kev_count":16,"has_kev":17},{"version":104,"cve_count":16,"kev_count":16,"has_kev":17},{"version":106,"cve_count":16,"kev_count":16,"has_kev":17},{"version":108,"cve_count":16,"kev_count":16,"has_kev":17},{"version":110,"cve_count":16,"kev_count":16,"has_kev":17},{"version":112,"cve_count":16,"kev_count":16,"has_kev":17},{"version":114,"cve_count":16,"kev_count":16,"has_kev":17},{"version":116,"cve_count":16,"kev_count":16,"has_kev":17},{"version":118,"cve_count":16,"kev_count":16,"has_kev":17},{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},{"version":144,"cve_count":16,"kev_count":16,"has_kev":17},{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},{"version":148,"cve_count":16,"kev_count":16,"has_kev":17},{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},[227,235,241,247,252,257,264,269,273,278],{"cveId":228,"description":229,"publishedDate":230,"cvssScore":231,"cvssVersion":232,"severity":233,"isKev":4,"epssScore":234},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":236,"description":237,"publishedDate":238,"cvssScore":239,"cvssVersion":232,"severity":233,"isKev":4,"epssScore":240},"CVE-2021-34527","\u003Cp>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u003C\u002Fp>\n\u003Cp>UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been released. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability.\u003C\u002Fp>\n\u003Cp>In addition to installing the updates, in order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (\u003Cstrong>Note\u003C\u002Fstrong>: These registry keys do not exist by default, and therefore are already at the secure setting.), also that your Group Policy setting are correct (see FAQ):\u003C\u002Fp>\n\u003Cul>\n\u003Cli>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Printers\\PointAndPrint\u003C\u002Fli>\n\u003Cli>NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting)\u003C\u002Fli>\n\u003Cli>UpdatePromptSettings = 0 (DWORD) or not defined (default setting)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Having NoWarningNoElevationOnInstall set to 1 makes your system vulnerable by design.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>UPDATE July 6, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. See also \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Ftopic\u002F31b91c02-05bc-4ada-a7ea-183b129578a7\">KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Note that the security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as “PrintNightmare”, documented in CVE-2021-34527.\u003C\u002Fp>\n","2021-07-02",8.8,0.99792,{"cveId":242,"description":243,"publishedDate":244,"cvssScore":245,"cvssVersion":232,"severity":233,"isKev":4,"epssScore":246},"CVE-2024-21412","Internet Shortcut Files Security Feature Bypass Vulnerability","2024-02-13",8.1,0.9941,{"cveId":248,"description":249,"publishedDate":250,"cvssScore":231,"cvssVersion":232,"severity":233,"isKev":4,"epssScore":251},"CVE-2023-36884","Windows Search Remote Code Execution Vulnerability","2023-07-11",0.98932,{"cveId":253,"description":254,"publishedDate":255,"cvssScore":231,"cvssVersion":232,"severity":233,"isKev":4,"epssScore":256},"CVE-2024-29059",".NET Framework Information Disclosure Vulnerability","2024-03-23",0.98624,{"cveId":258,"description":259,"publishedDate":260,"cvssScore":261,"cvssVersion":232,"severity":262,"isKev":17,"epssScore":263},"CVE-2023-21554","Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability","2023-04-11",9.8,"Critical",0.95454,{"cveId":265,"description":266,"publishedDate":267,"cvssScore":245,"cvssVersion":232,"severity":233,"isKev":17,"epssScore":268},"CVE-2023-35628","Windows MSHTML Platform Remote Code Execution Vulnerability","2023-12-12",0.92817,{"cveId":270,"description":271,"publishedDate":260,"cvssScore":231,"cvssVersion":232,"severity":233,"isKev":17,"epssScore":272},"CVE-2023-28302","Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability",0.92573,{"cveId":274,"description":275,"publishedDate":276,"cvssScore":231,"cvssVersion":232,"severity":233,"isKev":17,"epssScore":277},"CVE-2023-21547","Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability","2023-01-10",0.89276,{"cveId":279,"description":271,"publishedDate":260,"cvssScore":231,"cvssVersion":232,"severity":233,"isKev":17,"epssScore":280},"CVE-2023-21769",0.88673,[282,292,300,306,315,321,327,334,340,346,352,358,367,371,378,384,390,396,403,411,418,422,429,432,437,445,451,458,464,471,478,484,490,496,503,509,515,520,525,531,536,542,551,558,564,573,579,588,591,597],{"cveId":283,"description":284,"publishedDate":285,"cvssScore":286,"severity":233,"isKev":4,"epssScore":287,"cisaVulnName":288,"cisaDateAdded":289,"cisaShortDescription":290,"cisaRequiredAction":291},"CVE-2023-36424","Windows Common Log File System Driver Elevation of Privilege Vulnerability","2023-11-14",7.8,0.12087,"Microsoft Windows Out-of-Bounds Read Vulnerability","2026-04-13","Microsoft Windows Common Log File System Driver contains an out-of-bounds read vulnerability that could allow a threat actor for privileges escalation","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":293,"description":294,"publishedDate":295,"cvssScore":239,"severity":233,"isKev":4,"epssScore":296,"cisaVulnName":297,"cisaDateAdded":298,"cisaShortDescription":299,"cisaRequiredAction":291},"CVE-2025-33073","Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.","2025-06-10",0.82699,"Microsoft Windows SMB Client Improper Access Control Vulnerability","2025-10-20","Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate.",{"cveId":301,"description":302,"publishedDate":12,"cvssScore":286,"severity":233,"isKev":4,"epssScore":303,"cisaVulnName":304,"cisaDateAdded":12,"cisaShortDescription":305,"cisaRequiredAction":291},"CVE-2025-24990","Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems.  This is an announcement of the upcoming removal of ltmdm64.sys driver.  The driver has been removed in the October cumulative update.\nFax modem hardware dependent on this specific driver will no longer work on Windows.\nMicrosoft recommends removing any existing dependencies on this hardware.",0.06369,"Microsoft Windows Untrusted Pointer Dereference Vulnerability","Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.",{"cveId":307,"description":308,"publishedDate":309,"cvssScore":310,"severity":311,"isKev":4,"epssScore":312,"cisaVulnName":313,"cisaDateAdded":12,"cisaShortDescription":314,"cisaRequiredAction":291},"CVE-2025-47827","In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.","2025-06-05",4.6,"Medium",0.04927,"IGEL OS Use of a Key Past its Expiration Date Vulnerability","IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.",{"cveId":316,"description":317,"publishedDate":12,"cvssScore":286,"severity":233,"isKev":4,"epssScore":318,"cisaVulnName":319,"cisaDateAdded":12,"cisaShortDescription":320,"cisaRequiredAction":291},"CVE-2025-59230","Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.",0.02657,"Microsoft Windows Improper Access Control Vulnerability","Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.",{"cveId":322,"description":323,"publishedDate":295,"cvssScore":239,"severity":233,"isKev":4,"epssScore":324,"cisaVulnName":325,"cisaDateAdded":295,"cisaShortDescription":326,"cisaRequiredAction":291},"CVE-2025-33053","External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.",0.87015,"Microsoft Windows External Control of File Name or Path Vulnerability","Microsoft Windows contains an external control of file name or path vulnerability that could allow an attacker to execute code from a remote WebDAV location specified by the WorkingDirectory attribute of Internet Shortcut files.",{"cveId":328,"description":329,"publishedDate":330,"cvssScore":286,"severity":233,"isKev":4,"epssScore":331,"cisaVulnName":332,"cisaDateAdded":330,"cisaShortDescription":333,"cisaRequiredAction":291},"CVE-2025-32706","Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.","2025-05-13",0.02333,"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a heap-based buffer overflow vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":335,"description":336,"publishedDate":330,"cvssScore":286,"severity":233,"isKev":4,"epssScore":337,"cisaVulnName":338,"cisaDateAdded":330,"cisaShortDescription":339,"cisaRequiredAction":291},"CVE-2025-32709","Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.",0.01818,"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to escalate privileges to administrator.",{"cveId":341,"description":342,"publishedDate":330,"cvssScore":286,"severity":233,"isKev":4,"epssScore":343,"cisaVulnName":344,"cisaDateAdded":330,"cisaShortDescription":345,"cisaRequiredAction":291},"CVE-2025-32701","Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.",0.01416,"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","Microsoft Windows Common Log File System (CLFS) Driver contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":347,"description":348,"publishedDate":330,"cvssScore":286,"severity":233,"isKev":4,"epssScore":349,"cisaVulnName":350,"cisaDateAdded":330,"cisaShortDescription":351,"cisaRequiredAction":291},"CVE-2025-30400","Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.",0.01917,"Microsoft Windows DWM Core Library Use-After-Free Vulnerability","Microsoft Windows DWM Core Library contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally.",{"cveId":353,"description":354,"publishedDate":330,"cvssScore":231,"severity":233,"isKev":4,"epssScore":355,"cisaVulnName":356,"cisaDateAdded":330,"cisaShortDescription":357,"cisaRequiredAction":291},"CVE-2025-30397","Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.",0.27044,"Microsoft Windows Scripting Engine Type Confusion Vulnerability","Microsoft Windows Scripting Engine contains a type confusion vulnerability that allows an unauthorized attacker to execute code over a network via a specially crafted URL.",{"cveId":359,"description":360,"publishedDate":361,"cvssScore":362,"severity":311,"isKev":4,"epssScore":363,"cisaVulnName":364,"cisaDateAdded":365,"cisaShortDescription":366,"cisaRequiredAction":291},"CVE-2025-24054","External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.","2025-03-11",6.5,0.6227,"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","2025-04-17","Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network.",{"cveId":368,"description":342,"publishedDate":369,"cvssScore":286,"severity":233,"isKev":4,"epssScore":370,"cisaVulnName":344,"cisaDateAdded":369,"cisaShortDescription":345,"cisaRequiredAction":291},"CVE-2025-29824","2025-04-08",0.13904,{"cveId":372,"description":373,"publishedDate":361,"cvssScore":374,"severity":311,"isKev":4,"epssScore":375,"cisaVulnName":376,"cisaDateAdded":361,"cisaShortDescription":377,"cisaRequiredAction":291},"CVE-2025-24991","Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.",5.5,0.02018,"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an out-of-bounds read vulnerability that allows an authorized attacker to disclose information locally.",{"cveId":379,"description":380,"publishedDate":361,"cvssScore":286,"severity":233,"isKev":4,"epssScore":381,"cisaVulnName":382,"cisaDateAdded":361,"cisaShortDescription":383,"cisaRequiredAction":291},"CVE-2025-24993","Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.",0.02216,"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","Microsoft Windows New Technology File System (NTFS) contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":385,"description":386,"publishedDate":361,"cvssScore":286,"severity":233,"isKev":4,"epssScore":387,"cisaVulnName":388,"cisaDateAdded":361,"cisaShortDescription":389,"cisaRequiredAction":291},"CVE-2025-24985","Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.",0.0389,"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","Microsoft Windows Fast FAT File System Driver contains an integer overflow or wraparound vulnerability that allows an unauthorized attacker to execute code locally.",{"cveId":391,"description":392,"publishedDate":361,"cvssScore":310,"severity":311,"isKev":4,"epssScore":393,"cisaVulnName":394,"cisaDateAdded":361,"cisaShortDescription":395,"cisaRequiredAction":291},"CVE-2025-24984","Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.",0.01994,"Microsoft Windows NTFS Information Disclosure Vulnerability","Microsoft Windows New Technology File System (NTFS) contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.",{"cveId":397,"description":398,"publishedDate":361,"cvssScore":399,"severity":233,"isKev":4,"epssScore":400,"cisaVulnName":401,"cisaDateAdded":361,"cisaShortDescription":402,"cisaRequiredAction":291},"CVE-2025-26633","Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.",7,0.30391,"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows an unauthorized attacker to bypass a security feature locally.",{"cveId":404,"description":405,"publishedDate":406,"cvssScore":286,"severity":233,"isKev":4,"epssScore":407,"cisaVulnName":408,"cisaDateAdded":406,"cisaShortDescription":409,"cisaRequiredAction":410},"CVE-2025-21418","Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability","2025-02-11",0.01568,"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains a heap-based buffer overflow vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":412,"description":413,"publishedDate":406,"cvssScore":414,"severity":233,"isKev":4,"epssScore":415,"cisaVulnName":416,"cisaDateAdded":406,"cisaShortDescription":417,"cisaRequiredAction":410},"CVE-2025-21391","Windows Storage Elevation of Privilege Vulnerability",7.1,0.02303,"Microsoft Windows Storage Link Following Vulnerability","Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable.",{"cveId":253,"description":254,"publishedDate":255,"cvssScore":231,"severity":233,"isKev":4,"epssScore":256,"cisaVulnName":419,"cisaDateAdded":420,"cisaShortDescription":421,"cisaRequiredAction":410},"Microsoft .NET Framework Information Disclosure Vulnerability","2025-02-04","Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.",{"cveId":423,"description":424,"publishedDate":425,"cvssScore":286,"severity":233,"isKev":4,"epssScore":426,"cisaVulnName":427,"cisaDateAdded":425,"cisaShortDescription":428,"cisaRequiredAction":410},"CVE-2025-21335","Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability","2025-01-14",0.0139,"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","Microsoft Windows Hyper-V NT Kernel Integration VSP contains a use-after-free vulnerability that allows a local attacker to gain SYSTEM privileges.",{"cveId":430,"description":424,"publishedDate":425,"cvssScore":286,"severity":233,"isKev":4,"epssScore":431,"cisaVulnName":427,"cisaDateAdded":425,"cisaShortDescription":428,"cisaRequiredAction":410},"CVE-2025-21334",0.01561,{"cveId":433,"description":424,"publishedDate":425,"cvssScore":286,"severity":233,"isKev":4,"epssScore":434,"cisaVulnName":435,"cisaDateAdded":425,"cisaShortDescription":436,"cisaRequiredAction":410},"CVE-2025-21333",0.09988,"Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","Microsoft Windows Hyper-V NT Kernel Integration VSP contains a heap-based buffer overflow vulnerability that allows a local attacker to gain SYSTEM privileges.",{"cveId":438,"description":439,"publishedDate":440,"cvssScore":286,"severity":233,"isKev":4,"epssScore":441,"cisaVulnName":442,"cisaDateAdded":443,"cisaShortDescription":444,"cisaRequiredAction":410},"CVE-2024-35250","Windows Kernel-Mode Driver Elevation of Privilege Vulnerability","2024-06-11",0.25222,"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","2024-12-16","Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.",{"cveId":446,"description":284,"publishedDate":447,"cvssScore":286,"severity":233,"isKev":4,"epssScore":448,"cisaVulnName":332,"cisaDateAdded":449,"cisaShortDescription":450,"cisaRequiredAction":410},"CVE-2024-49138","2024-12-12",0.26215,"2024-12-10","Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges.",{"cveId":452,"description":453,"publishedDate":454,"cvssScore":239,"severity":233,"isKev":4,"epssScore":455,"cisaVulnName":456,"cisaDateAdded":454,"cisaShortDescription":457,"cisaRequiredAction":410},"CVE-2024-49039","Windows Task Scheduler Elevation of Privilege Vulnerability","2024-11-12",0.14179,"Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions.",{"cveId":459,"description":460,"publishedDate":454,"cvssScore":362,"severity":311,"isKev":4,"epssScore":461,"cisaVulnName":462,"cisaDateAdded":454,"cisaShortDescription":463,"cisaRequiredAction":410},"CVE-2024-43451","NTLM Hash Disclosure Spoofing Vulnerability",0.85434,"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user.",{"cveId":465,"description":466,"publishedDate":440,"cvssScore":399,"severity":233,"isKev":4,"epssScore":467,"cisaVulnName":468,"cisaDateAdded":469,"cisaShortDescription":470,"cisaRequiredAction":410},"CVE-2024-30088","Windows Kernel Elevation of Privilege Vulnerability",0.68202,"Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","2024-10-15","Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. ",{"cveId":472,"description":473,"publishedDate":474,"cvssScore":286,"severity":233,"isKev":4,"epssScore":475,"cisaVulnName":476,"cisaDateAdded":474,"cisaShortDescription":477,"cisaRequiredAction":410},"CVE-2024-43572","Microsoft Management Console Remote Code Execution Vulnerability","2024-10-08",0.66695,"Microsoft Windows Management Console Remote Code Execution Vulnerability","Microsoft Windows Management Console contains unspecified vulnerability that allows for remote code execution.",{"cveId":479,"description":480,"publishedDate":474,"cvssScore":245,"severity":233,"isKev":4,"epssScore":481,"cisaVulnName":482,"cisaDateAdded":474,"cisaShortDescription":483,"cisaRequiredAction":410},"CVE-2024-43573","Windows MSHTML Platform Spoofing Vulnerability",0.46109,"Microsoft Windows MSHTML Platform Spoofing Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality.",{"cveId":485,"description":480,"publishedDate":486,"cvssScore":239,"severity":233,"isKev":4,"epssScore":487,"cisaVulnName":482,"cisaDateAdded":488,"cisaShortDescription":489,"cisaRequiredAction":410},"CVE-2024-43461","2024-09-10",0.54486,"2024-09-16","Microsoft Windows MSHTML Platform contains a user interface (UI) misrepresentation of critical information vulnerability that allows an attacker to spoof a web page. This vulnerability was exploited in conjunction with CVE-2024-38112.",{"cveId":491,"description":492,"publishedDate":486,"cvssScore":286,"severity":233,"isKev":4,"epssScore":493,"cisaVulnName":494,"cisaDateAdded":486,"cisaShortDescription":495,"cisaRequiredAction":410},"CVE-2024-38014","Windows Installer Elevation of Privilege Vulnerability",0.06263,"Microsoft Windows Installer Improper Privilege Management Vulnerability","Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges.",{"cveId":497,"description":498,"publishedDate":486,"cvssScore":499,"severity":311,"isKev":4,"epssScore":500,"cisaVulnName":501,"cisaDateAdded":486,"cisaShortDescription":502,"cisaRequiredAction":410},"CVE-2024-38217","Windows Mark of the Web Security Feature Bypass Vulnerability",5.4,0.10026,"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","Microsoft Windows Mark of the Web (MOTW) contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW tagging.",{"cveId":504,"description":466,"publishedDate":505,"cvssScore":399,"severity":233,"isKev":4,"epssScore":506,"cisaVulnName":507,"cisaDateAdded":505,"cisaShortDescription":508,"cisaRequiredAction":410},"CVE-2024-38106","2024-08-13",0.06337,"Microsoft Windows Kernel Privilege Escalation Vulnerability","Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.",{"cveId":510,"description":511,"publishedDate":505,"cvssScore":286,"severity":233,"isKev":4,"epssScore":512,"cisaVulnName":513,"cisaDateAdded":505,"cisaShortDescription":514,"cisaRequiredAction":410},"CVE-2024-38107","Windows Power Dependency Coordinator Elevation of Privilege Vulnerability",0.01635,"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.",{"cveId":516,"description":498,"publishedDate":505,"cvssScore":362,"severity":311,"isKev":4,"epssScore":517,"cisaVulnName":518,"cisaDateAdded":505,"cisaShortDescription":519,"cisaRequiredAction":410},"CVE-2024-38213",0.13626,"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.",{"cveId":521,"description":405,"publishedDate":505,"cvssScore":286,"severity":233,"isKev":4,"epssScore":522,"cisaVulnName":523,"cisaDateAdded":505,"cisaShortDescription":524,"cisaRequiredAction":410},"CVE-2024-38193",0.28739,"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.",{"cveId":526,"description":527,"publishedDate":505,"cvssScore":231,"severity":233,"isKev":4,"epssScore":528,"cisaVulnName":529,"cisaDateAdded":505,"cisaShortDescription":530,"cisaRequiredAction":410},"CVE-2024-38178","Scripting Engine Memory Corruption Vulnerability",0.4138,"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.",{"cveId":532,"description":480,"publishedDate":533,"cvssScore":231,"severity":233,"isKev":4,"epssScore":534,"cisaVulnName":482,"cisaDateAdded":533,"cisaShortDescription":535,"cisaRequiredAction":410},"CVE-2024-38112","2024-07-09",0.84225,"Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.",{"cveId":537,"description":538,"publishedDate":533,"cvssScore":286,"severity":233,"isKev":4,"epssScore":539,"cisaVulnName":540,"cisaDateAdded":533,"cisaShortDescription":541,"cisaRequiredAction":410},"CVE-2024-38080","Windows Hyper-V Elevation of Privilege Vulnerability",0.07115,"Microsoft Windows Hyper-V Privilege Escalation Vulnerability","Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.",{"cveId":543,"description":544,"publishedDate":545,"cvssScore":286,"severity":233,"isKev":4,"epssScore":546,"cisaVulnName":547,"cisaDateAdded":548,"cisaShortDescription":549,"cisaRequiredAction":550},"CVE-2024-26169","Windows Error Reporting Service Elevation of Privilege Vulnerability","2024-03-12",0.03981,"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","2024-06-13","Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.","Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.",{"cveId":552,"description":553,"publishedDate":554,"cvssScore":286,"severity":233,"isKev":4,"epssScore":555,"cisaVulnName":556,"cisaDateAdded":554,"cisaShortDescription":557,"cisaRequiredAction":410},"CVE-2024-30051","Windows DWM Core Library Elevation of Privilege Vulnerability","2024-05-14",0.05687," Microsoft DWM Core Library Privilege Escalation Vulnerability","Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.",{"cveId":559,"description":560,"publishedDate":554,"cvssScore":239,"severity":233,"isKev":4,"epssScore":561,"cisaVulnName":562,"cisaDateAdded":554,"cisaShortDescription":563,"cisaRequiredAction":410},"CVE-2024-30040","Windows MSHTML Platform Security Feature Bypass Vulnerability",0.03939,"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.",{"cveId":565,"description":566,"publishedDate":567,"cvssScore":286,"severity":233,"isKev":4,"epssScore":568,"cisaVulnName":569,"cisaDateAdded":570,"cisaShortDescription":571,"cisaRequiredAction":572},"CVE-2022-38028","Windows Print Spooler Elevation of Privilege Vulnerability","2022-10-11",0.14949,"Microsoft Windows Print Spooler Privilege Escalation Vulnerability ","2024-04-23","Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.  ",{"cveId":574,"description":466,"publishedDate":244,"cvssScore":286,"severity":233,"isKev":4,"epssScore":575,"cisaVulnName":576,"cisaDateAdded":577,"cisaShortDescription":578,"cisaRequiredAction":410},"CVE-2024-21338",0.5981,"Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","2024-03-04","Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation.",{"cveId":580,"description":581,"publishedDate":582,"cvssScore":583,"severity":233,"isKev":4,"epssScore":584,"cisaVulnName":585,"cisaDateAdded":586,"cisaShortDescription":587,"cisaRequiredAction":410},"CVE-2023-29360","Microsoft Streaming Service Elevation of Privilege Vulnerability","2023-06-14",8.4,0.2162,"Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","2024-02-29","Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.",{"cveId":242,"description":243,"publishedDate":244,"cvssScore":245,"severity":233,"isKev":4,"epssScore":246,"cisaVulnName":589,"cisaDateAdded":244,"cisaShortDescription":590,"cisaRequiredAction":410},"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass.",{"cveId":592,"description":593,"publishedDate":244,"cvssScore":594,"severity":233,"isKev":4,"epssScore":595,"cisaVulnName":518,"cisaDateAdded":244,"cisaShortDescription":596,"cisaRequiredAction":410},"CVE-2024-21351","Windows SmartScreen Security Feature Bypass Vulnerability",7.6,0.27798,"Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience and inject code to potentially gain code execution, which could lead to some data exposure, lack of system availability, or both.",{"cveId":598,"description":498,"publishedDate":230,"cvssScore":499,"severity":311,"isKev":4,"epssScore":599,"cisaVulnName":600,"cisaDateAdded":601,"cisaShortDescription":602,"cisaRequiredAction":410},"CVE-2023-36584",0.03251,"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","2023-11-16","Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.",{"title":604,"metaDescription":605,"keywords":606,"structuredData":607},"Windows 11 22h2 by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Windows 11 22h2 by Microsoft covering 69 versions with 1473 tracked vulnerabilities including 0 critical and 42 high-severity issues and 73 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows 11 22h2 vulnerabilities, Windows 11 22h2 security, Windows 11 22h2 CVE, Microsoft Windows 11 22h2, Windows 11 22h2 threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows 11 22h2 KEV, Windows 11 22h2 exploited vulnerabilities",{"@context":608,"@type":609,"name":610,"description":605,"url":611,"manufacturer":612,"applicationCategory":616,"softwareVersion":617,"mainEntity":618},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows 11 22h2","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows_11_22h2",{"@type":613,"name":614,"url":615},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","69 versions tracked",{"@type":619,"name":620,"description":621,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows 11 22h2 Security Vulnerabilities","Security vulnerabilities affecting Windows 11 22h2 by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":623,"apiVersion":624},"2026-10-17T11:28:49.192Z","3.0",[],{"rows":627,"total":760,"capped":4,"failed":16},[628,633,638,643,647,651,655,660,664,668,672,676,681,686,690,694,698,702,706,711,715,719,724,728,732,737,742,747,751,755],{"cveId":283,"name":288,"severity":233,"cvss":286,"added":289,"epss":287,"published":629,"ranges":630,"checked":4,"hits":632,"covers":17},"2023-11-14T18:15:45.99",[631],"before 10.0.22621.2715",[],{"cveId":293,"name":297,"severity":233,"cvss":239,"added":298,"epss":296,"published":634,"ranges":635,"checked":4,"hits":637,"covers":17},"2025-06-10T17:23:02.967",[636],"before 10.0.22621.5472",[],{"cveId":301,"name":304,"severity":233,"cvss":286,"added":12,"epss":303,"published":639,"ranges":640,"checked":4,"hits":642,"covers":17},"2025-10-14T17:15:39.193",[641],"before 10.0.22621.6060",[],{"cveId":307,"name":313,"severity":311,"cvss":310,"added":12,"epss":312,"published":644,"ranges":645,"checked":4,"hits":646,"covers":17},"2025-06-05T14:15:32.263",[641],[],{"cveId":316,"name":319,"severity":233,"cvss":286,"added":12,"epss":318,"published":648,"ranges":649,"checked":4,"hits":650,"covers":17},"2025-10-14T17:16:04.173",[641],[],{"cveId":322,"name":325,"severity":233,"cvss":239,"added":295,"epss":324,"published":652,"ranges":653,"checked":4,"hits":654,"covers":17},"2025-06-10T17:22:18.853",[636],[],{"cveId":328,"name":332,"severity":233,"cvss":286,"added":330,"epss":331,"published":656,"ranges":657,"checked":4,"hits":659,"covers":17},"2025-05-13T17:16:03.607",[658],"before 10.0.22621.5335",[],{"cveId":335,"name":338,"severity":233,"cvss":286,"added":330,"epss":337,"published":661,"ranges":662,"checked":4,"hits":663,"covers":17},"2025-05-13T17:16:04.02",[658],[],{"cveId":341,"name":344,"severity":233,"cvss":286,"added":330,"epss":343,"published":665,"ranges":666,"checked":4,"hits":667,"covers":17},"2025-05-13T17:16:02.71",[658],[],{"cveId":347,"name":350,"severity":233,"cvss":286,"added":330,"epss":349,"published":669,"ranges":670,"checked":4,"hits":671,"covers":17},"2025-05-13T17:16:02.537",[658],[],{"cveId":353,"name":356,"severity":233,"cvss":231,"added":330,"epss":355,"published":673,"ranges":674,"checked":4,"hits":675,"covers":17},"2025-05-13T17:16:02.37",[658],[],{"cveId":359,"name":364,"severity":311,"cvss":362,"added":365,"epss":363,"published":677,"ranges":678,"checked":4,"hits":680,"covers":17},"2025-03-11T17:16:27.66",[679],"before 10.0.22621.5039",[],{"cveId":368,"name":344,"severity":233,"cvss":286,"added":369,"epss":370,"published":682,"ranges":683,"checked":4,"hits":685,"covers":17},"2025-04-08T18:16:08.34",[684],"before 10.0.22621.5189",[],{"cveId":372,"name":376,"severity":311,"cvss":374,"added":361,"epss":375,"published":687,"ranges":688,"checked":4,"hits":689,"covers":17},"2025-03-11T17:16:35.297",[679],[],{"cveId":379,"name":382,"severity":233,"cvss":286,"added":361,"epss":381,"published":691,"ranges":692,"checked":4,"hits":693,"covers":17},"2025-03-11T17:16:35.797",[679],[],{"cveId":385,"name":388,"severity":233,"cvss":286,"added":361,"epss":387,"published":695,"ranges":696,"checked":4,"hits":697,"covers":17},"2025-03-11T17:16:34.303",[679],[],{"cveId":391,"name":394,"severity":311,"cvss":310,"added":361,"epss":393,"published":699,"ranges":700,"checked":4,"hits":701,"covers":17},"2025-03-11T17:16:34.09",[679],[],{"cveId":397,"name":401,"severity":233,"cvss":399,"added":361,"epss":400,"published":703,"ranges":704,"checked":4,"hits":705,"covers":17},"2025-03-11T17:16:43.39",[679],[],{"cveId":404,"name":408,"severity":233,"cvss":286,"added":406,"epss":407,"published":707,"ranges":708,"checked":4,"hits":710,"covers":17},"2025-02-11T18:15:40.023",[709],"before 10.0.22621.4890",[],{"cveId":412,"name":416,"severity":233,"cvss":414,"added":406,"epss":415,"published":712,"ranges":713,"checked":4,"hits":714,"covers":17},"2025-02-11T18:15:37.723",[709],[],{"cveId":253,"name":419,"severity":233,"cvss":231,"added":420,"epss":256,"published":716,"ranges":717,"checked":4,"hits":718,"covers":17},"2024-03-23T00:15:09.15",[],[],{"cveId":423,"name":427,"severity":233,"cvss":286,"added":425,"epss":426,"published":720,"ranges":721,"checked":4,"hits":723,"covers":17},"2025-01-14T18:15:58.96",[722],"before 10.0.22621.4751",[],{"cveId":430,"name":427,"severity":233,"cvss":286,"added":425,"epss":431,"published":725,"ranges":726,"checked":4,"hits":727,"covers":17},"2025-01-14T18:15:58.77",[722],[],{"cveId":433,"name":435,"severity":233,"cvss":286,"added":425,"epss":434,"published":729,"ranges":730,"checked":4,"hits":731,"covers":17},"2025-01-14T18:15:58.53",[722],[],{"cveId":438,"name":442,"severity":233,"cvss":286,"added":443,"epss":441,"published":733,"ranges":734,"checked":4,"hits":736,"covers":17},"2024-06-11T17:16:02.65",[735],"before 10.0.22621.3737",[],{"cveId":446,"name":332,"severity":233,"cvss":286,"added":449,"epss":448,"published":738,"ranges":739,"checked":4,"hits":741,"covers":17},"2024-12-12T02:04:40.307",[740],"before 10.0.22621.4602",[],{"cveId":452,"name":456,"severity":233,"cvss":239,"added":454,"epss":455,"published":743,"ranges":744,"checked":4,"hits":746,"covers":17},"2024-11-12T18:15:44.16",[745],"before 10.0.22621.4460",[],{"cveId":459,"name":462,"severity":311,"cvss":362,"added":454,"epss":461,"published":748,"ranges":749,"checked":4,"hits":750,"covers":17},"2024-11-12T18:15:22.483",[745],[],{"cveId":465,"name":468,"severity":233,"cvss":399,"added":469,"epss":467,"published":752,"ranges":753,"checked":4,"hits":754,"covers":17},"2024-06-11T17:15:56.81",[735],[],{"cveId":472,"name":476,"severity":233,"cvss":286,"added":474,"epss":475,"published":756,"ranges":757,"checked":4,"hits":759,"covers":17},"2024-10-08T18:15:24.593",[758],"before 10.0.22621.4317",[],50]