Microsoft
Microsoft Windows 11 22h2: vulnerabilidades y CVE
Microsoft Windows 11 22h2 tiene 1652 vulnerabilidades publicadas, 107 de ellas en los últimos 12 meses. 42 son críticas y 74 figuran en el catálogo de explotación activa de CISA.
CVE1652
Últimos 12 meses107
Críticas42
Explotadas activamente74
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-36424 | Alta (7.8) | 12% | ⚠ Explotación activa | 14 nov 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2025-33073 | Alta (8.8) | 83% | ⚠ Explotación activa | 10 jun 2025 | Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network. |
| CVE-2025-47827 | Media (4.6) | 4.9% | ⚠ Explotación activa | 5 jun 2025 | In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS… |
| CVE-2025-24990 | Alta (7.8) | 6.4% | ⚠ Explotación activa | 14 oct 2025 | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver… |
| CVE-2025-59230 | Alta (7.8) | 2.7% | ⚠ Explotación activa | 14 oct 2025 | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2025-33053 | Alta (8.8) | 87% | ⚠ Explotación activa | 10 jun 2025 | External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network. |
| CVE-2025-30397 | Alta (7.5) | 27% | ⚠ Explotación activa | 13 may 2025 | Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. |
| CVE-2025-32706 | Alta (7.8) | 2.3% | ⚠ Explotación activa | 13 may 2025 | Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-32701 | Alta (7.8) | 1.4% | ⚠ Explotación activa | 13 may 2025 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-32709 | Alta (7.8) | 2.1% | ⚠ Explotación activa | 13 may 2025 | Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2025-30400 | Alta (7.8) | 1.9% | ⚠ Explotación activa | 13 may 2025 | Use after free in Windows DWM allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24054 | Media (5.4) | 59% | ⚠ Explotación activa | 11 mar 2025 | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-29824 | Alta (7.8) | 14% | ⚠ Explotación activa | 8 abr 2025 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2025-24984 | Media (4.6) | 2.0% | ⚠ Explotación activa | 11 mar 2025 | Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2025-24993 | Alta (7.8) | 2.2% | ⚠ Explotación activa | 11 mar 2025 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. |
| CVE-2025-24985 | Alta (7.8) | 3.8% | ⚠ Explotación activa | 11 mar 2025 | Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally. |
| CVE-2025-24991 | Media (5.5) | 2.0% | ⚠ Explotación activa | 11 mar 2025 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2025-26633 | Alta (7) | 30% | ⚠ Explotación activa | 11 mar 2025 | Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2025-21418 | Alta (7.8) | 1.6% | ⚠ Explotación activa | 11 feb 2025 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
| CVE-2025-21391 | Alta (7.1) | 2.3% | ⚠ Explotación activa | 11 feb 2025 | Windows Storage Elevation of Privilege Vulnerability |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-50508 | Alta (7.5) | 0.92% | — | 9 jun 2026 | Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-64680 | Alta (7.8) | 0.37% | — | 9 dic 2025 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2025-64679 | Alta (7.8) | 0.45% | — | 9 dic 2025 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2025-62209 | Media (5.5) | 0.52% | — | 11 nov 2025 | Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally. |
| CVE-2025-62208 | Media (5.5) | 0.52% | — | 11 nov 2025 | Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally. |
| CVE-2025-59502 | Alta (7.5) | 1.1% | — | 14 oct 2025 | Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network. |
| CVE-2025-59295 | Alta (8.8) | 1.9% | — | 14 oct 2025 | Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network. |
| CVE-2025-59294 | Media (4.6) | 0.63% | — | 14 oct 2025 | Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2025-59290 | Alta (7.8) | 0.40% | — | 14 oct 2025 | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59289 | Alta (7) | 0.24% | — | 14 oct 2025 | Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59284 | Media (5.5) | 1.0% | — | 14 oct 2025 | Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally. |
| CVE-2025-59282 | Alta (7) | 0.61% | — | 14 oct 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects allows an unauthorized attacker to execute code locally. |
| CVE-2025-59280 | Baja (3.1) | 0.46% | — | 14 oct 2025 | Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network. |
| CVE-2025-59278 | Alta (7.8) | 0.27% | — | 14 oct 2025 | Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59277 | Alta (7.8) | 0.38% | — | 14 oct 2025 | Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59275 | Alta (7.8) | 0.27% | — | 14 oct 2025 | Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59261 | Alta (7) | 0.19% | — | 14 oct 2025 | Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59259 | Media (6.5) | 1.5% | — | 14 oct 2025 | Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network. |
| CVE-2025-59255 | Alta (7.8) | 0.42% | — | 14 oct 2025 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59254 | Alta (7.8) | 1.1% | — | 14 oct 2025 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59253 | Media (5.5) | 0.34% | — | 14 oct 2025 | Improper access control in Microsoft Windows Search Component allows an authorized attacker to deny service locally. |
| CVE-2025-59244 | Media (6.5) | 0.82% | — | 14 oct 2025 | External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-59242 | Alta (7.8) | 0.41% | — | 14 oct 2025 | Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59230 | Alta (7.8) | 2.7% | ⚠ Explotación activa | 14 oct 2025 | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59214 | Media (6.5) | 1.8% | — | 14 oct 2025 | Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2025-59211 | Media (5.5) | 0.61% | — | 14 oct 2025 | Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally. |
| CVE-2025-59209 | Media (5.5) | 0.47% | — | 14 oct 2025 | Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized attacker to disclose information locally. |
| CVE-2025-59208 | Alta (7.1) | 0.50% | — | 14 oct 2025 | Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network. |
| CVE-2025-59207 | Alta (7.8) | 0.42% | — | 14 oct 2025 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2025-59205 | Alta (7) | 0.20% | — | 14 oct 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.