Skip to content

Vulnerabilities of Microsoft Windows 11 version 22H3

Is your version affected?

CVE Summary Score Published
CVE-2026-26173 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary… 7.0 High Apr 14, 2026
CVE-2026-26170 Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-26169 Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally 6.1 Medium Apr 14, 2026
CVE-2026-26168 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary… 7.8 High Apr 14, 2026
CVE-2026-26163 Double free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-26159 Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker… 7.8 High Apr 14, 2026
CVE-2026-26156 Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally 7.8 High Apr 14, 2026
CVE-2026-26152 Insecure storage of sensitive information in Windows Cryptographic Services allows an authorized attacker to elevate… 7.0 High Apr 14, 2026
CVE-2026-26153 Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-20806 Access of resource using incompatible type ('type confusion') in Windows COM allows an authorized attacker to disclose… 5.5 Medium Apr 14, 2026
CVE-2026-20928 Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an… 4.6 Medium Apr 14, 2026
CVE-2026-32212 Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an… 5.5 Medium Apr 14, 2026
CVE-2026-33098 Use after free in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges… 7.8 High Apr 14, 2026
CVE-2026-33096 Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny service over a network 7.5 High Apr 14, 2026
CVE-2026-32218 Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information… 5.5 Medium Apr 14, 2026
CVE-2026-32217 Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information… 5.5 Medium Apr 14, 2026
CVE-2026-32215 Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information… 5.5 Medium Apr 14, 2026
CVE-2026-32202 Exploited Microsoft Windows Protection Mechanism Failure Vulnerability 4.3 Medium Apr 14, 2026
CVE-2026-32183 Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an… 7.8 High Apr 14, 2026
CVE-2026-32181 Improper privilege management in Microsoft Windows allows an authorized attacker to deny service locally 5.5 Medium Apr 14, 2026
CVE-2026-32165 Use after free in Windows User Interface Core allows an authorized attacker to elevate privileges locally 7.8 High Apr 14, 2026
CVE-2026-32160 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push… 7.8 High Apr 14, 2026
CVE-2026-32158 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push… 7.8 High Apr 14, 2026
CVE-2026-32159 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push… 7.8 High Apr 14, 2026
CVE-2026-32157 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Apr 14, 2026

Other Microsoft products