Microsoft Windows 11 version 21H2

Name: Microsoft Windows 11 version 21H2
Brand: Microsoft

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

10critical207high247medium32low

updated 2026-10-27

vulnerabilities (1,560)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-34527US	high9.0OT critical	99.8% (100th)	KEV	10.0.22000.318	2021-07-02	10.0.22000.0 → 10.0.22000.318
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	10.0.22000.2295	2023-07-11	10.0.22000.0 → 10.0.22000.2295
CVE-2024-21412US	—OT critical	99.4% (100th)	KEV	10.0.22000.2777	2024-02-13	10.0.0 → 10.0.22000.2777
CVE-2022-30190US	high9.3OT critical	99.2% (100th)	KEV	10.0.22000.739	2022-06-01	10.0.0 → 10.0.22000.739
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	10.0.22000.2600	2023-11-14	10.0.0 → 10.0.22000.2600
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	10.0.22000.3079	2024-07-09	10.0.0 → 10.0.22000.3079
CVE-2022-26923US	high9.0OT critical	83.5% (100th)	KEV	10.0.22000.1817	2022-05-10	10.0.0 → 10.0.22000.1817
CVE-2021-40449US	medium4.6OT critical	81.9% (100th)	KEV	10.0.22000.258	2021-10-13	10.0.0 → 10.0.22000.258
CVE-2024-30088US	—OT critical	68.2% (99th)	KEV	10.0.22000.3019	2024-06-11	10.0.22000.0 → 10.0.22000.3019
CVE-2024-21338US	—OT critical	59.8% (99th)	KEV	10.0.22000.2777	2024-02-13	10.0.0 → 10.0.22000.2777
CVE-2022-21882US	high7.8OT critical	59.2% (99th)	KEV	10.0.22000.434	2022-01-11	10.0.0 → 10.0.22000.434
CVE-2022-21971US	high9.3OT critical	53.8% (99th)	KEV	10.0.22000.493	2022-02-09	10.0.0 → 10.0.22000.493
CVE-2023-28252US	—OT critical	48.9% (99th)	KEV	10.0.22000.1817	2023-04-11	10.0.0 → 10.0.22000.1817
CVE-2024-29988US	—OT critical	45.2% (99th)	KEV	10.0.22000.2899	2024-04-09	10.0.0 → 10.0.22000.2899
CVE-2013-3900US	high7.6OT critical	44.6% (99th)	KEV	no fix	2013-12-11	≤ N/A
CVE-2023-36874US	—OT critical	42.6% (99th)	KEV	10.0.22000.2176	2023-07-11	10.0.0 → 10.0.22000.2176
CVE-2022-21999US	medium4.6OT critical	41.0% (99th)	KEV	10.0.22000.493	2022-02-09	10.0.0 → 10.0.22000.493
CVE-2023-21674US	—OT critical	34.2% (98th)	KEV	10.0.22000.1455	2023-01-10	10.0.0 → 10.0.22000.1455
CVE-2024-38193US	—OT critical	28.7% (98th)	KEV	10.0.22000.3147	2024-08-13	10.0.0 → 10.0.22000.3147
CVE-2022-37969US	—OT critical	28.3% (98th)	KEV	10.0.22000.978	2022-09-13	10.0.0 → 10.0.22000.978
CVE-2023-36802US	—OT critical	27.9% (98th)	KEV	10.0.22000.2416	2023-09-12	10.0.0 → 10.0.22000.2416
CVE-2024-35250US	—OT critical	25.2% (98th)	KEV	10.0.22000.3019	2024-06-11	10.0.22000.0 → 10.0.22000.3019
CVE-2023-29360US	—OT critical	21.6% (98th)	KEV	10.0.22000.2057	2023-06-14	10.0.0 → 10.0.22000.2057
CVE-2022-22718US	high7.2OT critical	18.5% (97th)	KEV	10.0.22000.493	2022-02-09	10.0.0 → 10.0.22000.493
CVE-2022-26904US	medium4.4OT critical	16.9% (97th)	KEV	10.0.22000.613	2022-04-15	10.0.0 → 10.0.22000.613
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	10.0.22000.2600	2023-11-14	10.0.0 → 10.0.22000.2600
CVE-2022-24521US	medium4.6OT critical	7.13% (94th)	KEV	10.0.22000.613	2022-04-15	10.0.0 → 10.0.22000.613
CVE-2024-38080US	—OT critical	7.12% (94th)	KEV	10.0.22000.3079	2024-07-09	10.0.0 → 10.0.22000.3079
CVE-2024-30051US	—OT critical	5.69% (93rd)	KEV	10.0.22000.2960	2024-05-14	10.0.0 → 10.0.22000.2960
CVE-2023-21823US	—OT critical	5.56% (93rd)	KEV	10.0.22621.1574	2023-02-14	10.0.0 → 10.0.22621.1574
CVE-2024-26169US	—OT critical	3.98% (90th)	KEV	10.0.22000.2836	2024-03-12	10.0.0 → 10.0.22000.2836
CVE-2021-43226US	high7.8OT critical	3.28% (88th)	KEV	10.0.22000.376	2021-12-15	10.0.0 → 10.0.22000.376
CVE-2023-28229US	—OT critical	1.67% (77th)	KEV	10.0.22000.1817	2023-04-11	10.0.0 → 10.0.22000.1817
CVE-2023-24880US	—OT critical	78.0% (100th)	KEV	10.0.22000.1696	2023-03-14	10.0.0 → 10.0.22000.1696
CVE-2022-44698US	—OT critical	76.3% (100th)	KEV	10.0.22000.1335	2022-12-13	10.0.22000.0 → 10.0.22000.1335
CVE-2022-34713US	—OT critical	67.8% (99th)	KEV	10.0.22000.856	2022-08-09	10.0.0 → 10.0.22000.856
CVE-2024-43572US	—OT critical	66.7% (99th)	KEV	10.0.22000.3260	2024-10-08	10.0.22000.0 → 10.0.22000.3260
CVE-2024-43461US	—OT critical	54.5% (99th)	KEV	10.0.22000.3197	2024-09-10	10.0.0 → 10.0.22000.3197
CVE-2024-43573US	high8.1OT critical	46.1% (99th)	KEV	10.0.22000.3260	2024-10-08	10.0.22000.0 → 10.0.22000.3260
CVE-2024-38178US	—OT critical	41.4% (99th)	KEV	10.0.22000.3147	2024-08-13	10.0.0 → 10.0.22000.3147
CVE-2024-21351US	—OT critical	27.8% (98th)	KEV	10.0.22000.2777	2024-02-13	10.0.0 → 10.0.22000.2777
CVE-2022-41128US	—OT critical	24.6% (98th)	KEV	10.0.22000.1219	2022-11-09	10.0.0 → 10.0.22000.1219
CVE-2023-36563US	medium5.5OT critical	20.3% (97th)	KEV	10.0.22000.2538	2023-10-10	10.0.0 → 10.0.22000.2538
CVE-2021-41379US	medium4.6OT critical	19.5% (97th)	KEV	10.0.22000.318	2021-11-10	10.0.0 → 10.0.22000.318
CVE-2022-22047US	high7.2OT critical	18.8% (97th)	KEV	10.0.22000.795	2022-07-12	10.0.0 → 10.0.22000.795
CVE-2023-36036US	high7.8OT critical	16.7% (97th)	KEV	10.0.22000.2600	2023-11-14	10.0.0 → 10.0.22000.2600
CVE-2022-38028US	—OT critical	14.9% (97th)	KEV	10.0.22000.1098	2022-10-11	10.0.0 → 10.0.22000.1098
CVE-2024-38213US	—OT critical	13.6% (96th)	KEV	10.0.22000.3019	2024-08-13	10.0.0 → 10.0.22000.3019
CVE-2023-36033US	high7.8OT critical	10.9% (96th)	KEV	10.0.22000.2600	2023-11-14	10.0.0 → 10.0.22000.2600
CVE-2023-23376US	—OT critical	10.9% (96th)	KEV	10.0.22621.1574	2023-02-14	10.0.0 → 10.0.22621.1574

showing 50 of 1,560

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation391 CVEs
CWE-264CWE-264297 CVEs
CWE-269Improper Privilege Management161 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor148 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')131 CVEs
CWE-122Heap-based Buffer Overflow124 CVEs
CWE-416Use After Free116 CVEs
CWE-125Out-of-bounds Read106 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)1,560 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan