Skip to content

Vulnerabilities of Microsoft Windows 11 version 22H3

Is your version affected?

CVE Summary Score Published
CVE-2026-41097 Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security… 6.7 Medium May 12, 2026
CVE-2026-40413 Windows TCP/IP Denial of Service Vulnerability 7.4 High May 12, 2026
CVE-2026-40403 Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally 8.8 High May 12, 2026
CVE-2026-40401 Windows TCP/IP Denial of Service Vulnerability 7.1 High May 12, 2026
CVE-2026-40402 Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally 9.3 Critical May 12, 2026
CVE-2026-40398 Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-32209 Improper access control in Windows Filtering Platform (WFP) allows an authorized attacker to bypass a security feature… 4.4 Medium May 12, 2026
CVE-2026-40397 Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate… 7.8 High May 12, 2026
CVE-2026-40382 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-34340 Use after free in Windows Projected File System allows an authorized attacker to elevate privileges locally 7.0 High May 12, 2026
CVE-2026-34341 Double free in Windows Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally 7.0 High May 12, 2026
CVE-2026-34339 Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny… 5.5 Medium May 12, 2026
CVE-2026-34337 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-34338 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-34336 Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-34334 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows… 7.8 High May 12, 2026
CVE-2026-33838 Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-33837 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-33835 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.8 High May 12, 2026
CVE-2026-42825 Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.0 High May 12, 2026
CVE-2026-32170 Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally 6.7 Medium May 12, 2026
CVE-2026-32161 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi… 7.5 High May 12, 2026
CVE-2026-41096 Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network 9.8 Critical May 12, 2026
CVE-2026-41088 Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an… 7.8 High May 12, 2026
CVE-2026-40415 Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network 8.1 High May 12, 2026

Other Microsoft products