Microsoft Windows 11
By the Year
In 2021 there have been 60 vulnerabilities in Microsoft Windows 11 with an average score of 7.3 out of ten. Windows 11 did not have any published security vulnerabilities last year. That is, 60 more vulnerabilities have already been reported in 2021 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2021 | 60 | 7.31 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Windows 11 vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Windows 11 Security Vulnerabilities
Microsoft COM for Windows Remote Code Execution Vulnerability
CVE-2021-42275
8.8 - High
- November 10, 2021
Microsoft COM for Windows Remote Code Execution Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2021-41371
4.4 - Medium
- November 10, 2021
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38631.
Windows Feedback Hub Elevation of Privilege Vulnerability
CVE-2021-42280
7.8 - High
- November 10, 2021
Windows Feedback Hub Elevation of Privilege Vulnerability
Improper Privilege Management
Chakra Scripting Engine Memory Corruption Vulnerability
CVE-2021-42279
7.5 - High
- November 10, 2021
Chakra Scripting Engine Memory Corruption Vulnerability
Memory Corruption
NTFS Elevation of Privilege Vulnerability
CVE-2021-41370
7.8 - High
- November 10, 2021
NTFS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-41367, CVE-2021-42283.
Improper Privilege Management
NTFS Elevation of Privilege Vulnerability
CVE-2021-41367
7.8 - High
- November 10, 2021
NTFS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-41370, CVE-2021-42283.
Improper Privilege Management
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
CVE-2021-41366
7.8 - High
- November 10, 2021
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
Improper Privilege Management
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2021-42277
7.8 - High
- November 10, 2021
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
Improper Privilege Management
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-42276
7.8 - High
- November 10, 2021
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability
CVE-2021-42274
6.5 - Medium
- November 10, 2021
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-41379
7.8 - High
- November 10, 2021
Windows Installer Elevation of Privilege Vulnerability
Improper Privilege Management
Windows NTFS Remote Code Execution Vulnerability
CVE-2021-41378
8.8 - High
- November 10, 2021
Windows NTFS Remote Code Execution Vulnerability
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
CVE-2021-41377
7.8 - High
- November 10, 2021
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
Improper Privilege Management
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-42285
7.8 - High
- November 10, 2021
Windows Kernel Elevation of Privilege Vulnerability
Improper Privilege Management
Windows Hyper-V Denial of Service Vulnerability
CVE-2021-42284
7.5 - High
- November 10, 2021
Windows Hyper-V Denial of Service Vulnerability
Resource Exhaustion
NTFS Elevation of Privilege Vulnerability
CVE-2021-42283
7.8 - High
- November 10, 2021
NTFS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-41367, CVE-2021-41370.
Improper Privilege Management
Windows Denial of Service Vulnerability
CVE-2021-41356
7.5 - High
- November 10, 2021
Windows Denial of Service Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2021-38666
8.8 - High
- November 10, 2021
Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2021-38665
6.5 - Medium
- November 10, 2021
Remote Desktop Protocol Client Information Disclosure Vulnerability
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
CVE-2021-38631
4.4 - Medium
- November 10, 2021
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-41371.
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
CVE-2021-26443
9 - Critical
- November 10, 2021
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
Windows Print Spooler Spoofing Vulnerability
CVE-2021-36970
6.5 - Medium
- October 13, 2021
Windows Print Spooler Spoofing Vulnerability
Windows Fast FAT File System Driver Information Disclosure Vulnerability
CVE-2021-38662
5.5 - Medium
- October 13, 2021
Windows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-41343.
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-38672
9 - Critical
- October 13, 2021
Windows Hyper-V Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-40461.
Windows exFAT File System Information Disclosure Vulnerability
CVE-2021-38663
5.5 - Medium
- October 13, 2021
Windows exFAT File System Information Disclosure Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40443
7.8 - High
- October 13, 2021
Windows Common Log File System Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40466, CVE-2021-40467.
Improper Privilege Management
Windows TCP/IP Denial of Service Vulnerability
CVE-2021-36953
7.5 - High
- October 13, 2021
Windows TCP/IP Denial of Service Vulnerability
Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2021-26442
7.8 - High
- October 13, 2021
Windows HTTP.sys Elevation of Privilege Vulnerability
Improper Privilege Management
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-26441
7.8 - High
- October 13, 2021
Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40478, CVE-2021-40488, CVE-2021-40489, CVE-2021-41345.
Improper Privilege Management
Windows Nearby Sharing Elevation of Privilege Vulnerability
CVE-2021-40464
8 - High
- October 13, 2021
Windows Nearby Sharing Elevation of Privilege Vulnerability
Improper Privilege Management
Windows Fast FAT File System Driver Information Disclosure Vulnerability
CVE-2021-41343
5.5 - Medium
- October 13, 2021
Windows Fast FAT File System Driver Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-38662.
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-40489
7.8 - High
- October 13, 2021
Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441, CVE-2021-40478, CVE-2021-40488, CVE-2021-41345.
Improper Privilege Management
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-40488
7.8 - High
- October 13, 2021
Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441, CVE-2021-40478, CVE-2021-40489, CVE-2021-41345.
Improper Privilege Management
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-40478
7.8 - High
- October 13, 2021
Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441, CVE-2021-40488, CVE-2021-40489, CVE-2021-41345.
Improper Privilege Management
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-40477
7.8 - High
- October 13, 2021
Windows Event Tracing Elevation of Privilege Vulnerability
Improper Privilege Management
Windows AppContainer Elevation Of Privilege Vulnerability
CVE-2021-40476
7.3 - High
- October 13, 2021
Windows AppContainer Elevation Of Privilege Vulnerability
Improper Privilege Management
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
CVE-2021-40475
5.5 - Medium
- October 13, 2021
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2021-40470
7.8 - High
- October 13, 2021
DirectX Graphics Kernel Elevation of Privilege Vulnerability
Improper Privilege Management
Windows Bind Filter Driver Information Disclosure Vulnerability
CVE-2021-40468
5.5 - Medium
- October 13, 2021
Windows Bind Filter Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40467
7.8 - High
- October 13, 2021
Windows Common Log File System Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40443, CVE-2021-40466.
Improper Privilege Management
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40466
7.8 - High
- October 13, 2021
Windows Common Log File System Driver Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40443, CVE-2021-40467.
Improper Privilege Management
Windows NAT Denial of Service Vulnerability
CVE-2021-40463
6.5 - Medium
- October 13, 2021
Windows NAT Denial of Service Vulnerability
Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
CVE-2021-40462
7.8 - High
- October 13, 2021
Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
Windows AppX Deployment Service Elevation of Privilege Vulnerability
CVE-2021-41347
7.8 - High
- October 13, 2021
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Improper Privilege Management
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-41345
7.8 - High
- October 13, 2021
Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441, CVE-2021-40478, CVE-2021-40488, CVE-2021-40489.
Improper Privilege Management
Windows Text Shaping Remote Code Execution Vulnerability
CVE-2021-40465
7.8 - High
- October 13, 2021
Windows Text Shaping Remote Code Execution Vulnerability
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2021-41342
8.8 - High
- October 13, 2021
Windows MSHTML Platform Remote Code Execution Vulnerability
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2021-41340
7.8 - High
- October 13, 2021
Windows Graphics Component Remote Code Execution Vulnerability
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-41339
7.8 - High
- October 13, 2021
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Improper Privilege Management
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
CVE-2021-41338
5.5 - Medium
- October 13, 2021
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
Windows Kernel Information Disclosure Vulnerability
CVE-2021-41336
5.5 - Medium
- October 13, 2021
Windows Kernel Information Disclosure Vulnerability
Windows Desktop Bridge Elevation of Privilege Vulnerability
CVE-2021-41334
7.8 - High
- October 13, 2021
Windows Desktop Bridge Elevation of Privilege Vulnerability
Improper Privilege Management
Windows Print Spooler Information Disclosure Vulnerability
CVE-2021-41332
6.5 - Medium
- October 13, 2021
Windows Print Spooler Information Disclosure Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-40461
9 - Critical
- October 13, 2021
Windows Hyper-V Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-38672.
Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
CVE-2021-40460
6.5 - Medium
- October 13, 2021
Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2021-41357
7.8 - High
- October 13, 2021
Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40449, CVE-2021-40450.
Improper Privilege Management
Windows Installer Spoofing Vulnerability
CVE-2021-40455
5.5 - Medium
- October 13, 2021
Windows Installer Spoofing Vulnerability
Rich Text Edit Control Information Disclosure Vulnerability
CVE-2021-40454
5.5 - Medium
- October 13, 2021
Rich Text Edit Control Information Disclosure Vulnerability
Cleartext Storage of Sensitive Information
Win32k Elevation of Privilege Vulnerability
CVE-2021-40450
7.8 - High
- October 13, 2021
Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40449, CVE-2021-41357.
Improper Privilege Management
Win32k Elevation of Privilege Vulnerability
CVE-2021-40449
7.8 - High
- October 13, 2021
Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40450, CVE-2021-41357.
Improper Privilege Management
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Windows Server 2022 or by Microsoft? Click the Watch button to subscribe.
