Skip to content

Known vulnerabilities in Microsoft Windows 11 version 22H3

Is your version affected?

CVE Summary Score Published
CVE-2025-29840 Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network 8.8 High May 13, 2025
CVE-2025-29839 Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally 4.0 Medium May 13, 2025
CVE-2025-29837 Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to… 5.5 Medium May 13, 2025
CVE-2025-29836 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium May 13, 2025
CVE-2025-29835 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium May 13, 2025
CVE-2025-29833 Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to… 7.7 High May 13, 2025
CVE-2025-29832 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium May 13, 2025
CVE-2025-29830 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 6.5 Medium May 13, 2025
CVE-2025-29829 Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose… 5.5 Medium May 13, 2025
CVE-2025-32709 Exploited Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability 7.8 High May 13, 2025
CVE-2025-32706 Exploited Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability 7.8 High May 13, 2025
CVE-2025-32701 Exploited Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability 7.8 High May 13, 2025
CVE-2025-30400 Exploited Microsoft Windows DWM Core Library Use-After-Free Vulnerability 7.8 High May 13, 2025
CVE-2025-27468 Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally 7.0 High May 13, 2025
CVE-2025-29971 Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network 7.5 High May 13, 2025
CVE-2025-29969 Time-of-check time-of-use (toctou) race condition in Windows Fundamentals allows an authorized attacker to execute… 7.5 High May 13, 2025
CVE-2025-29967 Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a… 8.8 High May 13, 2025
CVE-2025-29966 Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network 8.8 High May 13, 2025
CVE-2025-29964 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network 8.8 High May 13, 2025
CVE-2025-29960 Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium May 13, 2025
CVE-2025-29959 Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 6.5 Medium May 13, 2025
CVE-2025-24062 Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-24060 Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-29811 Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-29812 Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025

Other Microsoft products