Microsoft
Microsoft Windows 11 21h2: vulnerabilidades y CVE
Microsoft Windows 11 21h2 tiene 1001 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 36 son críticas y 67 figuran en el catálogo de explotación activa de CISA.
CVE1001
Últimos 12 meses0
Críticas36
Explotadas activamente67
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-36424 | Alta (7.8) | 12% | ⚠ Explotación activa | 14 nov 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2021-43226 | Alta (7.8) | 3.1% | ⚠ Explotación activa | 15 dic 2021 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2024-35250 | Alta (7.8) | 25% | ⚠ Explotación activa | 11 jun 2024 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
| CVE-2024-30088 | Alta (7) | 68% | ⚠ Explotación activa | 11 jun 2024 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-43573 | Alta (8.1) | 46% | ⚠ Explotación activa | 8 oct 2024 | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-43572 | Alta (7.8) | 67% | ⚠ Explotación activa | 8 oct 2024 | Microsoft Management Console Remote Code Execution Vulnerability |
| CVE-2024-43461 | Alta (8.8) | 54% | ⚠ Explotación activa | 10 sept 2024 | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-38014 | Alta (7.8) | 6.3% | ⚠ Explotación activa | 10 sept 2024 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2024-38217 | Media (5.4) | 10% | ⚠ Explotación activa | 10 sept 2024 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-38193 | Alta (7.8) | 29% | ⚠ Explotación activa | 13 ago 2024 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2024-38178 | Alta (7.5) | 41% | ⚠ Explotación activa | 13 ago 2024 | Scripting Engine Memory Corruption Vulnerability |
| CVE-2024-38107 | Alta (7.8) | 1.6% | ⚠ Explotación activa | 13 ago 2024 | Windows Power Dependency Coordinator Elevation of Privilege Vulnerability |
| CVE-2024-38106 | Alta (7) | 6.3% | ⚠ Explotación activa | 13 ago 2024 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-38213 | Media (6.5) | 14% | ⚠ Explotación activa | 13 ago 2024 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-38080 | Alta (7.8) | 7.1% | ⚠ Explotación activa | 9 jul 2024 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2024-38112 | Alta (7.5) | 84% | ⚠ Explotación activa | 9 jul 2024 | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-26169 | Alta (7.8) | 4.0% | ⚠ Explotación activa | 12 mar 2024 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
| CVE-2024-30040 | Alta (8.8) | 3.9% | ⚠ Explotación activa | 14 may 2024 | Windows MSHTML Platform Security Feature Bypass Vulnerability |
| CVE-2024-30051 | Alta (7.8) | 5.6% | ⚠ Explotación activa | 14 may 2024 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2024-29988 | Alta (8.8) | 45% | ⚠ Explotación activa | 9 abr 2024 | SmartScreen Prompt Security Feature Bypass Vulnerability |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-40733 | Media (6.5) | 0.83% | — | 18 dic 2024 | An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server… |
| CVE-2022-40732 | Alta (7.5) | 0.77% | — | 18 dic 2024 | An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server… |
| CVE-2024-43615 | Alta (7.1) | 1.2% | — | 8 oct 2024 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2024-43599 | Alta (8.8) | 1.4% | — | 8 oct 2024 | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2024-43585 | Media (5.5) | 0.49% | — | 8 oct 2024 | Code Integrity Guard Security Feature Bypass Vulnerability |
| CVE-2024-43584 | Alta (8.4) | 0.54% | — | 8 oct 2024 | Windows Scripting Engine Security Feature Bypass Vulnerability |
| CVE-2024-43583 | Alta (7.8) | 1.3% | — | 8 oct 2024 | Winlogon Elevation of Privilege Vulnerability |
| CVE-2024-43582 | Alta (8.1) | 3.2% | — | 8 oct 2024 | Remote Desktop Protocol Server Remote Code Execution Vulnerability |
| CVE-2024-43581 | Alta (7.1) | 1.4% | — | 8 oct 2024 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2024-43574 | Alta (8.3) | 1.2% | — | 8 oct 2024 | Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability |
| CVE-2024-43573 | Alta (8.1) | 46% | ⚠ Explotación activa | 8 oct 2024 | Windows MSHTML Platform Spoofing Vulnerability |
| CVE-2024-43572 | Alta (7.8) | 67% | ⚠ Explotación activa | 8 oct 2024 | Microsoft Management Console Remote Code Execution Vulnerability |
| CVE-2024-43570 | Alta (7) | 0.50% | — | 8 oct 2024 | Windows Kernel Elevation of Privilege Vulnerability |
| CVE-2024-43565 | Alta (7.5) | 2.2% | — | 8 oct 2024 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
| CVE-2024-43563 | Alta (7.8) | 0.46% | — | 8 oct 2024 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2024-43562 | Alta (7.5) | 2.2% | — | 8 oct 2024 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
| CVE-2024-43561 | Media (6.5) | 0.82% | — | 8 oct 2024 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
| CVE-2024-43560 | Alta (7.8) | 3.6% | — | 8 oct 2024 | Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability |
| CVE-2024-43559 | Media (6.5) | 0.82% | — | 8 oct 2024 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
| CVE-2024-43558 | Media (6.5) | 0.82% | — | 8 oct 2024 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
| CVE-2024-43557 | Media (6.5) | 0.82% | — | 8 oct 2024 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
| CVE-2024-43556 | Alta (7.8) | 0.72% | — | 8 oct 2024 | Windows Graphics Component Elevation of Privilege Vulnerability |
| CVE-2024-43555 | Media (6.5) | 0.82% | — | 8 oct 2024 | Windows Mobile Broadband Driver Denial of Service Vulnerability |
| CVE-2024-43554 | Media (5.5) | 0.64% | — | 8 oct 2024 | Windows Kernel-Mode Driver Information Disclosure Vulnerability |
| CVE-2024-43553 | Alta (7) | 0.50% | — | 8 oct 2024 | NT OS Kernel Elevation of Privilege Vulnerability |
| CVE-2024-43551 | Alta (7.8) | 0.63% | — | 8 oct 2024 | Windows Storage Elevation of Privilege Vulnerability |
| CVE-2024-43550 | Alta (7.4) | 1.1% | — | 8 oct 2024 | Windows Secure Channel Spoofing Vulnerability |
| CVE-2024-43547 | Media (5.9) | 0.65% | — | 8 oct 2024 | Windows Kerberos Information Disclosure Vulnerability |
| CVE-2024-43546 | Media (5.6) | 0.63% | — | 8 oct 2024 | Windows Cryptographic Information Disclosure Vulnerability |
| CVE-2024-43543 | Media (6.8) | 0.63% | — | 8 oct 2024 | Windows Mobile Broadband Driver Remote Code Execution Vulnerability |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.