Microsoft Corp Windows 11
productRUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
2critical136high217medium31low
updated 2026-10-27
01
vulnerabilities (610)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2022-30190US | high9.3OT critical | KEV |
| CVE-2022-26923US | high9.0OT critical | KEV |
| CVE-2021-40449US | medium4.6OT critical | KEV |
| CVE-2022-21882US | high7.8OT critical | KEV |
| CVE-2022-21971US | high9.3OT critical | KEV |
| CVE-2013-3900US | high7.6OT critical | KEV |
| CVE-2022-21999US | medium4.6OT critical | KEV |
| CVE-2023-21674US | —OT critical | KEV |
| CVE-2022-37969US | —OT critical | KEV |
| CVE-2022-22718US | high7.2OT critical | KEV |
| CVE-2022-26904US | medium4.4OT critical | KEV |
| CVE-2023-21823US | —OT critical | KEV |
| CVE-2021-43226US | high7.8OT critical | KEV |
| CVE-2022-44698US | —OT critical | KEV |
| CVE-2022-34713US | —OT critical | KEV |
| CVE-2022-41128US | —OT critical | KEV |
| CVE-2021-41379US | medium4.6OT critical | KEV |
| CVE-2022-22047US | high7.2OT critical | KEV |
| CVE-2022-38028US | —OT critical | KEV |
| CVE-2022-26925US | medium5.9OT critical | KEV |
| CVE-2022-41125US | —OT critical | KEV |
| CVE-2022-41049US | —OT critical | KEV |
| CVE-2022-41073US | —OT critical | KEV |
| CVE-2022-41091US | —OT critical | KEV |
| CVE-2022-41033US | —OT critical | KEV |
| CVE-2021-41357US | medium4.6OT critical | KEV |
| CVE-2021-40450US | medium4.6OT critical | KEV |
| CVE-2022-21907US | high10.0 | Exploit |
| CVE-2022-30216US | medium6.5 | Exploit |
| CVE-2022-23270US | high9.3 | Exploit |
| CVE-2022-23253US | medium4.0 | Exploit |
| CVE-2022-34718US | — | Exploit |
| CVE-2021-26414US | medium4.3 | Exploit |
| CVE-2022-44666US | — | Exploit |
| CVE-2022-24500US | medium6.8 | Exploit |
| CVE-2022-24497US | high7.5 | Exploit |
| CVE-2022-24491US | high7.5 | Exploit |
| CVE-2022-21881US | high7.2 | Exploit |
| CVE-2022-24481US | medium4.6 | Exploit |
| CVE-2021-38666US | medium6.8 | Exploit |
| CVE-2022-22715US | high7.2 | Exploit |
| CVE-2021-43883US | high7.8 | Exploit |
| CVE-2026-50656US | high7.0 | Exploit |
| CVE-2021-43893US | high7.5 | Exploit |
| CVE-2021-43217US | critical9.8 | Exploit |
| CVE-2026-50507US | —OT elevated | Exploit |
| CVE-2022-21974US | high9.3 | Exploit |
| CVE-2022-26927US | high8.8 | Exploit |
| CVE-2021-43224US | medium5.5 | Exploit |
| CVE-2022-41099US | — | Exploit |
showing 50 of 610
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-264CWE-264149 CVEs
- CWE-269Improper Privilege Management134 CVEs
- CWE-20Improper Input Validation102 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor68 CVEs
- CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')61 CVEs
- CWE-94Improper Control of Generation of Code ('Code Injection')53 CVEs
- CWE-254CWE-25423 CVEs
- CWE-668Exposure of Resource to Wrong Sphere17 CVEs
03
sources (1)
Which sources assert this record, and when.
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan