Microsoft Corp Windows 11 21H2

Name: Microsoft Corp Windows 11 21H2
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical64high34medium1low

updated 2026-10-27

vulnerabilities (965)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	—
CVE-2023-36884US	—OT critical	99.4% (100th)	KEV	no fix	2023-07-11	—
CVE-2024-21412US	—OT critical	99.4% (100th)	KEV	no fix	2024-02-13	—
CVE-2023-36025US	high8.8OT critical	88.1% (100th)	KEV	no fix	2023-11-14	—
CVE-2024-38112US	—OT critical	84.2% (100th)	KEV	no fix	2024-07-09	—
CVE-2024-30088US	—OT critical	68.2% (99th)	KEV	no fix	2024-06-11	—
CVE-2024-21338US	—OT critical	59.8% (99th)	KEV	no fix	2024-02-13	—
CVE-2023-28252US	—OT critical	48.9% (99th)	KEV	no fix	2023-04-11	—
CVE-2024-29988US	—OT critical	45.2% (99th)	KEV	no fix	2024-04-09	—
CVE-2023-36874US	—OT critical	42.6% (99th)	KEV	no fix	2023-07-11	—
CVE-2024-38193US	—OT critical	28.7% (98th)	KEV	no fix	2024-08-13	—
CVE-2023-36802US	—OT critical	27.9% (98th)	KEV	no fix	2023-09-12	—
CVE-2024-35250US	—OT critical	25.2% (98th)	KEV	no fix	2024-06-11	—
CVE-2023-29360US	—OT critical	21.6% (98th)	KEV	no fix	2023-06-14	—
CVE-2023-36424US	high7.8OT critical	12.1% (96th)	KEV	no fix	2023-11-14	—
CVE-2024-38080US	—OT critical	7.12% (94th)	KEV	no fix	2024-07-09	—
CVE-2024-30051US	—OT critical	5.69% (93rd)	KEV	no fix	2024-05-14	—
CVE-2023-21823US	—OT critical	5.56% (93rd)	KEV	no fix	2023-02-14	—
CVE-2024-26169US	—OT critical	3.98% (90th)	KEV	no fix	2024-03-12	—
CVE-2023-28229US	—OT critical	1.67% (77th)	KEV	no fix	2023-04-11	—
CVE-2023-24880US	—OT critical	78.0% (100th)	KEV	no fix	2023-03-14	—
CVE-2024-43572US	—OT critical	66.7% (99th)	KEV	no fix	2024-10-08	—
CVE-2024-43461US	—OT critical	54.5% (99th)	KEV	no fix	2024-09-10	—
CVE-2024-43573US	high8.1OT critical	46.1% (99th)	KEV	no fix	2024-10-08	—
CVE-2024-38178US	—OT critical	41.4% (99th)	KEV	no fix	2024-08-13	—
CVE-2024-21351US	—OT critical	27.8% (98th)	KEV	no fix	2024-02-13	—
CVE-2023-36563US	medium5.5OT critical	20.3% (97th)	KEV	no fix	2023-10-10	—
CVE-2023-36036US	high7.8OT critical	16.7% (97th)	KEV	no fix	2023-11-14	—
CVE-2024-38213US	—OT critical	13.6% (96th)	KEV	no fix	2024-08-13	—
CVE-2023-36033US	high7.8OT critical	10.9% (96th)	KEV	no fix	2023-11-14	—
CVE-2023-23376US	—OT critical	10.9% (96th)	KEV	no fix	2023-02-14	—
CVE-2024-38217US	—OT critical	10.0% (96th)	KEV	no fix	2024-09-10	—
CVE-2023-32046US	—OT critical	9.97% (96th)	KEV	no fix	2023-07-11	—
CVE-2024-38106US	—OT critical	6.34% (94th)	KEV	no fix	2024-08-13	—
CVE-2024-38014US	—OT critical	6.26% (94th)	KEV	no fix	2024-09-10	—
CVE-2023-32049US	—OT critical	4.16% (91st)	KEV	no fix	2023-07-11	—
CVE-2024-30040US	—OT critical	3.94% (90th)	KEV	no fix	2024-05-14	—
CVE-2023-36584US	—OT critical	3.25% (88th)	KEV	no fix	2023-10-10	—
CVE-2024-38107US	—OT critical	1.64% (76th)	KEV	no fix	2024-08-13	—
CVE-2023-21554US	—	95.4% (100th)	Exploit	no fix	2023-04-11	—
CVE-2024-38063US	—	70.6% (99th)	Exploit	no fix	2024-08-13	—
CVE-2023-21768US	—	65.4% (99th)	Exploit	no fix	2023-01-10	—
CVE-2023-38146US	—	37.4% (99th)	Exploit	no fix	2023-09-12	—
CVE-2024-38144US	—	32.3% (98th)	Exploit	no fix	2024-08-13	—
CVE-2024-26230US	—	24.1% (98th)	Exploit	no fix	2024-04-09	—
CVE-2024-21320US	medium6.5	22.6% (98th)	Exploit	no fix	2024-01-09	—
CVE-2024-20674US	—	17.2% (97th)	Exploit	no fix	2024-01-09	—
CVE-2024-3596US	critical9.0OT high	14.9% (97th)	Exploit	no fix	2024-07-09	—
CVE-2024-30085US	—	14.3% (97th)	Exploit	no fix	2024-06-11	—
CVE-2023-41772US	—	13.3% (96th)	Exploit	no fix	2023-10-10	—

showing 50 of 965

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation289 CVEs
CWE-264CWE-264148 CVEs
CWE-122Heap-based Buffer Overflow124 CVEs
CWE-416Use After Free105 CVEs
CWE-125Out-of-bounds Read100 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor83 CVEs
CWE-190Integer Overflow or Wraparound71 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')68 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)962 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan