windows 11 21h2 vulnerabilities and fixes

Recent CVEs affecting windows 11 21h2, with upgrade or downgrade steps. 238 tracked.

Also searched as: windows1121h2.

windows 11 21h2 has 238 tracked vulnerabilities, 4 critical and 14 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 235. Most recent: 2024-12-18. Highest priority: CVE-2024-30088 (score 89/100).

• CVE-2024-43461 HIGH 8.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows MSHTML Platform Spoofing Vulnerability
• CVE-2024-38259 HIGH 8.8 UPGRADE UPGRADE Microsoft Management Console Remote Code Execution Vulnerability
• CVE-2024-38257 HIGH 7.5 UPGRADE UPGRADE Microsoft AllJoyn API Information Disclosure Vulnerability
• CVE-2024-38254 MEDIUM 5.5 UPGRADE UPGRADE Windows Authentication Information Disclosure Vulnerability
• CVE-2024-38253 HIGH 7.8 UPGRADE UPGRADE Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
• CVE-2024-38252 HIGH 7.8 UPGRADE UPGRADE Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
• CVE-2024-38249 HIGH 7.8 UPGRADE UPGRADE Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2024-38248 HIGH 7.0 UPGRADE UPGRADE Windows Storage Elevation of Privilege Vulnerability
• CVE-2024-38247 HIGH 7.8 UPGRADE UPGRADE Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2024-38246 HIGH 7.0 UPGRADE UPGRADE Win32k Elevation of Privilege Vulnerability
• CVE-2024-38245 HIGH 7.8 UPGRADE UPGRADE Kernel Streaming Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38244 HIGH 7.8 UPGRADE UPGRADE Kernel Streaming Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38243 HIGH 7.8 UPGRADE UPGRADE Kernel Streaming Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38242 HIGH 7.8 UPGRADE UPGRADE Kernel Streaming Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38241 HIGH 7.8 UPGRADE UPGRADE Kernel Streaming Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38240 HIGH 8.1 UPGRADE UPGRADE Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
• CVE-2024-38239 HIGH 7.2 UPGRADE UPGRADE Windows Kerberos Elevation of Privilege Vulnerability
• CVE-2024-38238 HIGH 7.8 UPGRADE UPGRADE Kernel Streaming Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38237 HIGH 7.8 UPGRADE UPGRADE Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38235 MEDIUM 6.5 UPGRADE UPGRADE Windows Hyper-V Denial of Service Vulnerability
• CVE-2024-38234 MEDIUM 6.5 UPGRADE UPGRADE Windows Networking Denial of Service Vulnerability
• CVE-2024-38217 MEDIUM 5.4 EXPLOITED UPGRADE UPGRADE Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability
• CVE-2024-38119 HIGH 7.5 UPGRADE UPGRADE Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
• CVE-2024-38046 HIGH 7.8 UPGRADE UPGRADE PowerShell Elevation of Privilege Vulnerability
• CVE-2024-38045 HIGH 8.1 UPGRADE UPGRADE Windows TCP/IP Remote Code Execution Vulnerability
• CVE-2024-38014 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Installer Improper Privilege Management Vulnerability
• CVE-2024-30073 HIGH 7.8 UPGRADE UPGRADE Windows Security Zone Mapping Security Feature Bypass Vulnerability
• CVE-2024-21416 HIGH 8.1 UPGRADE UPGRADE Windows TCP/IP Remote Code Execution Vulnerability
• CVE-2024-30088 HIGH 7.0 EXPLOITED UPGRADE UPGRADE Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
• CVE-2024-35265 HIGH 7.0 UPGRADE UPGRADE Windows Perception Service Elevation of Privilege Vulnerability
• CVE-2024-35250 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
• CVE-2024-30099 HIGH 7.0 UPGRADE UPGRADE Windows Kernel Elevation of Privilege Vulnerability
• CVE-2024-30097 HIGH 8.8 UPGRADE UPGRADE Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
• CVE-2024-30096 MEDIUM 5.5 UPGRADE UPGRADE Windows Cryptographic Services Information Disclosure Vulnerability
• CVE-2024-30095 HIGH 7.8 UPGRADE UPGRADE Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2024-30094 HIGH 7.8 UPGRADE UPGRADE Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2024-30093 HIGH 7.3 UPGRADE UPGRADE Windows Storage Elevation of Privilege Vulnerability
• CVE-2024-30091 HIGH 7.8 UPGRADE UPGRADE Win32k Elevation of Privilege Vulnerability
• CVE-2024-30090 HIGH 7.0 UPGRADE UPGRADE Microsoft Streaming Service Elevation of Privilege Vulnerability
• CVE-2024-30089 HIGH 7.8 UPGRADE UPGRADE Microsoft Streaming Service Elevation of Privilege Vulnerability
• CVE-2024-30087 HIGH 7.8 UPGRADE UPGRADE Win32k Elevation of Privilege Vulnerability
• CVE-2024-30086 HIGH 7.8 UPGRADE UPGRADE Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
• CVE-2024-30085 HIGH 7.8 UPGRADE UPGRADE Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
• CVE-2024-30084 HIGH 7.0 UPGRADE UPGRADE Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
• CVE-2024-30082 HIGH 7.8 UPGRADE UPGRADE Win32k Elevation of Privilege Vulnerability
• CVE-2024-30080 CRITICAL 9.8 UPGRADE UPGRADE Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
• CVE-2024-30078 HIGH 8.8 UPGRADE UPGRADE Windows Wi-Fi Driver Remote Code Execution Vulnerability
• CVE-2024-30077 HIGH 8.0 UPGRADE UPGRADE Windows OLE Remote Code Execution Vulnerability
• CVE-2024-30076 MEDIUM 6.8 UPGRADE UPGRADE Windows Container Manager Service Elevation of Privilege Vulnerability
• CVE-2024-30069 MEDIUM 4.7 UPGRADE UPGRADE Windows Remote Access Connection Manager Information Disclosure Vulnerability
• CVE-2024-30068 HIGH 8.8 UPGRADE UPGRADE Windows Kernel Elevation of Privilege Vulnerability
• CVE-2024-30067 MEDIUM 5.5 UPGRADE UPGRADE Winlogon Elevation of Privilege Vulnerability
• CVE-2024-30066 MEDIUM 5.5 UPGRADE UPGRADE Winlogon Elevation of Privilege Vulnerability
• CVE-2024-30065 MEDIUM 5.5 UPGRADE UPGRADE Windows Themes Denial of Service Vulnerability
• CVE-2024-30063 MEDIUM 6.7 UPGRADE UPGRADE Windows Distributed File System (DFS) Remote Code Execution Vulnerability
• CVE-2024-43615 HIGH 7.1 UPGRADE UPGRADE Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
• CVE-2024-43599 HIGH 8.8 UPGRADE UPGRADE Remote Desktop Client Remote Code Execution Vulnerability
• CVE-2024-43585 MEDIUM 5.5 UPGRADE UPGRADE Code Integrity Guard Security Feature Bypass Vulnerability
• CVE-2024-43584 HIGH 7.7 UPGRADE UPGRADE Windows Scripting Engine Security Feature Bypass Vulnerability
• CVE-2024-43583 HIGH 7.8 UPGRADE UPGRADE Winlogon Elevation of Privilege Vulnerability
• CVE-2024-43582 HIGH 8.1 UPGRADE UPGRADE Remote Desktop Protocol Server Remote Code Execution Vulnerability
• CVE-2024-43581 HIGH 7.1 UPGRADE UPGRADE Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
• CVE-2024-43574 HIGH 8.3 UPGRADE UPGRADE Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
• CVE-2024-43573 MEDIUM 6.5 EXPLOITED UPGRADE UPGRADE Microsoft Windows MSHTML Platform Spoofing Vulnerability
• CVE-2024-43572 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Management Console Remote Code Execution Vulnerability
• CVE-2024-43570 MEDIUM 6.4 UPGRADE UPGRADE Windows Kernel Elevation of Privilege Vulnerability
• CVE-2024-43565 HIGH 7.5 UPGRADE UPGRADE Windows Network Address Translation (NAT) Denial of Service Vulnerability
• CVE-2024-43563 HIGH 7.8 UPGRADE UPGRADE Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
• CVE-2024-43562 HIGH 7.5 UPGRADE UPGRADE Windows Network Address Translation (NAT) Denial of Service Vulnerability
• CVE-2024-43561 MEDIUM 6.5 UPGRADE UPGRADE Windows Mobile Broadband Driver Denial of Service Vulnerability
• CVE-2024-43560 HIGH 7.8 UPGRADE UPGRADE Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
• CVE-2024-43559 MEDIUM 6.5 UPGRADE UPGRADE Windows Mobile Broadband Driver Denial of Service Vulnerability
• CVE-2024-43558 MEDIUM 6.5 UPGRADE UPGRADE Windows Mobile Broadband Driver Denial of Service Vulnerability
• CVE-2024-43557 MEDIUM 6.5 UPGRADE UPGRADE Windows Mobile Broadband Driver Denial of Service Vulnerability
• CVE-2024-43556 HIGH 7.8 UPGRADE UPGRADE Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2024-43555 MEDIUM 6.5 UPGRADE UPGRADE Windows Mobile Broadband Driver Denial of Service Vulnerability
• CVE-2024-43554 MEDIUM 5.5 UPGRADE UPGRADE Windows Kernel-Mode Driver Information Disclosure Vulnerability
• CVE-2024-43553 HIGH 7.4 UPGRADE UPGRADE NT OS Kernel Elevation of Privilege Vulnerability
• CVE-2024-43551 HIGH 7.8 UPGRADE UPGRADE Windows Storage Elevation of Privilege Vulnerability
• CVE-2024-43550 HIGH 7.4 UPGRADE UPGRADE Windows Secure Channel Spoofing Vulnerability
• CVE-2024-43547 MEDIUM 6.5 UPGRADE UPGRADE Windows Kerberos Information Disclosure Vulnerability
• CVE-2024-43546 MEDIUM 5.6 UPGRADE UPGRADE Windows Cryptographic Information Disclosure Vulnerability
• CVE-2024-43543 MEDIUM 6.8 UPGRADE UPGRADE Windows Mobile Broadband Driver Remote Code Execution Vulnerability
• CVE-2024-43542 MEDIUM 6.5 UPGRADE UPGRADE Windows Mobile Broadband Driver Denial of Service Vulnerability
• CVE-2024-43540 MEDIUM 6.5 UPGRADE UPGRADE Windows Mobile Broadband Driver Denial of Service Vulnerability
• CVE-2024-43538 MEDIUM 6.5 UPGRADE UPGRADE Windows Mobile Broadband Driver Denial of Service Vulnerability
• CVE-2024-43537 MEDIUM 6.5 UPGRADE UPGRADE Windows Mobile Broadband Driver Denial of Service Vulnerability
• CVE-2024-43536 MEDIUM 6.8 UPGRADE UPGRADE Windows Mobile Broadband Driver Remote Code Execution Vulnerability
• CVE-2024-43535 HIGH 7.0 UPGRADE UPGRADE Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
• CVE-2024-43534 MEDIUM 6.5 UPGRADE UPGRADE Windows Graphics Component Information Disclosure Vulnerability
• CVE-2024-43533 HIGH 8.8 UPGRADE UPGRADE Remote Desktop Client Remote Code Execution Vulnerability
• CVE-2024-43532 HIGH 8.8 UPGRADE UPGRADE Remote Registry Service Elevation of Privilege Vulnerability
• CVE-2024-43529 HIGH 7.3 UPGRADE UPGRADE Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2024-43528 HIGH 7.8 UPGRADE UPGRADE Windows Secure Kernel Mode Elevation of Privilege Vulnerability
• CVE-2024-43526 MEDIUM 6.8 UPGRADE UPGRADE Windows Mobile Broadband Driver Remote Code Execution Vulnerability
• CVE-2024-43525 MEDIUM 6.8 UPGRADE UPGRADE Windows Mobile Broadband Driver Remote Code Execution Vulnerability
• CVE-2024-43524 MEDIUM 6.8 UPGRADE UPGRADE Windows Mobile Broadband Driver Remote Code Execution Vulnerability
• CVE-2024-43523 MEDIUM 6.8 UPGRADE UPGRADE Windows Mobile Broadband Driver Remote Code Execution Vulnerability
• CVE-2024-43520 MEDIUM 5.0 UPGRADE UPGRADE Windows Kernel Denial of Service Vulnerability
• CVE-2024-43519 HIGH 8.8 UPGRADE UPGRADE Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
• CVE-2024-43518 HIGH 8.8 UPGRADE UPGRADE Windows Telephony Server Remote Code Execution Vulnerability
• CVE-2024-43517 HIGH 8.8 UPGRADE UPGRADE Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
• CVE-2024-43516 HIGH 7.8 UPGRADE UPGRADE Windows Secure Kernel Mode Elevation of Privilege Vulnerability
• CVE-2024-43515 HIGH 7.5 UPGRADE UPGRADE Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
• CVE-2024-43514 HIGH 7.8 UPGRADE UPGRADE Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
• CVE-2024-43513 MEDIUM 6.4 UPGRADE UPGRADE BitLocker Security Feature Bypass Vulnerability
• CVE-2024-43511 HIGH 7.0 UPGRADE UPGRADE Windows Kernel Elevation of Privilege Vulnerability
• CVE-2024-43509 HIGH 7.8 UPGRADE UPGRADE Windows Graphics Component Elevation of Privilege Vulnerability
• CVE-2024-43506 HIGH 7.5 UPGRADE UPGRADE BranchCache Denial of Service Vulnerability
• CVE-2024-43501 HIGH 7.8 UPGRADE UPGRADE Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2024-38223 MEDIUM 6.8 UPGRADE UPGRADE Windows Initial Machine Configuration Elevation of Privilege Vulnerability
• CVE-2024-38215 HIGH 7.8 UPGRADE UPGRADE Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
• CVE-2024-38213 MEDIUM 6.5 EXPLOITED UPGRADE UPGRADE Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
• CVE-2024-38202 HIGH 7.3 MITIGATE MITIGATE Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentia
• CVE-2024-38199 CRITICAL 9.8 UPGRADE UPGRADE Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
• CVE-2024-38198 HIGH 7.5 UPGRADE UPGRADE Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2024-38196 HIGH 7.8 UPGRADE UPGRADE Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2024-38193 HIGH 7.8 EXPLOITED UPGRADE UPGRADE Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability
• CVE-2024-38191 HIGH 7.8 UPGRADE UPGRADE Kernel Streaming Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38187 HIGH 7.8 UPGRADE UPGRADE Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
• CVE-2024-38186 HIGH 7.8 UPGRADE UPGRADE Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
• CVE-2024-38185 HIGH 7.8 UPGRADE UPGRADE Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
• CVE-2024-38184 HIGH 7.8 UPGRADE UPGRADE Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
• CVE-2024-38180 HIGH 8.8 UPGRADE UPGRADE Windows SmartScreen Security Feature Bypass Vulnerability
• CVE-2024-38178 HIGH 7.5 EXPLOITED UPGRADE UPGRADE Microsoft Windows Scripting Engine Memory Corruption Vulnerability
• CVE-2024-38163 HIGH 7.8 UPGRADE UPGRADE Windows Update Stack Elevation of Privilege Vulnerability
• CVE-2024-38161 MEDIUM 6.8 UPGRADE UPGRADE Windows Mobile Broadband Driver Remote Code Execution Vulnerability
• CVE-2024-38155 MEDIUM 5.5 UPGRADE UPGRADE Security Center Broker Information Disclosure Vulnerability
• CVE-2024-38153 HIGH 7.8 UPGRADE UPGRADE Windows Kernel Elevation of Privilege Vulnerability
• CVE-2024-38152 HIGH 7.8 UPGRADE UPGRADE Windows OLE Remote Code Execution Vulnerability
• CVE-2024-38151 MEDIUM 5.5 UPGRADE UPGRADE Windows Kernel Information Disclosure Vulnerability
• CVE-2024-38150 HIGH 7.8 UPGRADE UPGRADE Windows DWM Core Library Elevation of Privilege Vulnerability
• CVE-2024-38149 HIGH 7.5 UPGRADE UPGRADE BranchCache Denial of Service Vulnerability
• CVE-2024-38148 HIGH 7.5 UPGRADE UPGRADE Windows Secure Channel Denial of Service Vulnerability
• CVE-2024-38147 HIGH 7.8 UPGRADE UPGRADE Microsoft DWM Core Library Elevation of Privilege Vulnerability
• CVE-2024-38146 HIGH 7.5 UPGRADE UPGRADE Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
• CVE-2024-38145 HIGH 7.5 UPGRADE UPGRADE Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
• CVE-2024-38144 HIGH 8.8 UPGRADE UPGRADE Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38143 MEDIUM 4.2 UPGRADE UPGRADE Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
• CVE-2024-38142 HIGH 7.8 UPGRADE UPGRADE Windows Secure Kernel Mode Elevation of Privilege Vulnerability
• CVE-2024-38141 HIGH 7.8 UPGRADE UPGRADE Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
• CVE-2024-38140 CRITICAL 9.8 UPGRADE UPGRADE Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
• CVE-2024-38137 HIGH 7.0 UPGRADE UPGRADE Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
• CVE-2024-38136 HIGH 7.0 UPGRADE UPGRADE Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
• CVE-2024-38134 HIGH 7.8 UPGRADE UPGRADE Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
• CVE-2024-38133 HIGH 7.8 UPGRADE UPGRADE Windows Kernel Elevation of Privilege Vulnerability
• CVE-2024-38132 HIGH 7.5 UPGRADE UPGRADE Windows Network Address Translation (NAT) Denial of Service Vulnerability
• CVE-2024-38130 HIGH 8.8 UPGRADE UPGRADE Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
• CVE-2024-38127 HIGH 7.8 UPGRADE UPGRADE Windows Hyper-V Elevation of Privilege Vulnerability
• CVE-2024-38126 HIGH 7.5 UPGRADE UPGRADE Windows Network Address Translation (NAT) Denial of Service Vulnerability

FAQ

How do I fix windows 11 21h2 vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is windows 11 21h2 being exploited right now?

Yes: 14 windows 11 21h2 CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which windows 11 21h2 CVE should I patch first?

CVE-2024-30088 currently ranks highest (89/100): Microsoft Windows Kernel TOCTOU Race Condition Vulnerability.

RSS feed for windows 11 21h2 · ← Back to latest CVEs