IACS RadarIndustrial Cyber Exposure & Intelligence

Zurück zu Microsoft

Microsoft

Windows 11

Betriebssystem auf neueren Thin Clients und Engineering-Workstations.

99

Schwachstellen

99

KEV

0

Advisories

Kategorie

operating-system

Davon kritisch (CVSS ≥ 9)

0

KEV-Treffer

99

Patch verfügbar

37 / 99

RDPHTTPSOnderstations

Schwachstellen

Sortiert nach IACS-Radar-Prioritätswert (CVSS, EPSS, KEV und industrielle Relevanz kombiniert).

CVE-2021-34527

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

100/100CVSS 8.8 KEVPatch verfügbar

CVE-2024-21412

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

96/100CVSS 8.1 KEVKein Patch verfügbar

CVE-2023-36025

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

95/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2022-30190

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

95/100CVSS 7.8 KEVPatch verfügbar

CVE-2025-33053

Microsoft Windows External Control of File Name or Path Vulnerability

94/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2025-33073

Microsoft Windows SMB Client Improper Access Control Vulnerability

93/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2023-36884

Microsoft Windows Search Remote Code Execution Vulnerability

93/100CVSS 7.5 KEVKein Patch verfügbar

CVE-2024-38112

Microsoft Windows MSHTML Platform Spoofing Vulnerability

87/100CVSS 7.5 KEVKein Patch verfügbar

CVE-2021-40449

Microsoft Windows Win32k Privilege Escalation Vulnerability

87/100CVSS 7.8 KEVPatch verfügbar

CVE-2026-21510

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

84/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2024-43451

Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

82/100CVSS 6.5 KEVKein Patch verfügbar

CVE-2024-43572

Microsoft Windows Management Console Remote Code Execution Vulnerability

81/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2024-43461

Microsoft Windows MSHTML Platform Spoofing Vulnerability

81/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2022-34713

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

81/100CVSS 7.8 KEVPatch verfügbar

CVE-2024-30088

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

78/100CVSS 7.0 KEVKein Patch verfügbar

CVE-2024-21338

Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

78/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2022-21971

Microsoft Windows Runtime Remote Code Execution Vulnerability

76/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-21882

Microsoft Win32k Privilege Escalation Vulnerability

74/100CVSS 7.0 KEVPatch verfügbar

CVE-2025-24054

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

73/100CVSS 6.5 KEVKein Patch verfügbar

CVE-2023-28252

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

73/100CVSS 7.8 KEVPatch verfügbar

CVE-2023-21674

Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

72/100CVSS 8.8 KEVPatch verfügbar

CVE-2023-36874

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

71/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-21999

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

70/100CVSS 7.8 KEVPatch verfügbar

CVE-2024-38178

Microsoft Windows Scripting Engine Memory Corruption Vulnerability

69/100CVSS 7.5 KEVKein Patch verfügbar

CVE-2023-24880

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

69/100CVSS 4.4 KEVPatch verfügbar

CVE-2013-3900

Microsoft WinVerifyTrust function Remote Code Execution

69/100CVSS 5.5 KEVPatch verfügbar

CVE-2022-41128

Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

68/100CVSS 8.8 KEVPatch verfügbar

CVE-2026-32202

Microsoft Windows Protection Mechanism Failure Vulnerability

66/100CVSS 4.3 KEVKein Patch verfügbar

CVE-2024-43573

Microsoft Windows MSHTML Platform Spoofing Vulnerability

66/100CVSS 6.5 KEVKein Patch verfügbar

CVE-2024-38193

Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

65/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2022-37969

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

65/100CVSS 7.8 KEVPatch verfügbar

CVE-2026-21513

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

64/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2024-35250

Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

64/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2024-49138

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

64/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2024-49039

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

64/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2024-21351

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

64/100CVSS 7.6 KEVKein Patch verfügbar

CVE-2026-21533

Microsoft Windows Improper Privilege Management Vulnerability

63/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-30397

Microsoft Windows Scripting Engine Type Confusion Vulnerability

63/100CVSS 7.5 KEVKein Patch verfügbar

CVE-2026-96951

Microsoft Windows Command Injection Vulnerability

62/100CVSS 8.8 KEVPatch verfügbar

CVE-2025-26633

Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

62/100CVSS 7.0 KEVKein Patch verfügbar

CVE-2025-29824

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

61/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2022-22047

Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

61/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-22718

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

61/100CVSS 7.8 KEVPatch verfügbar

CVE-2023-36036

Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

60/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2023-32049

Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

60/100CVSS 8.8 KEVPatch verfügbar

CVE-2024-30040

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

59/100CVSS 8.8 KEVKein Patch verfügbar

CVE-2022-38028

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

59/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2022-26925

Microsoft Windows LSA Spoofing Vulnerability

59/100CVSS 8.1 KEVPatch verfügbar

CVE-2023-36424

Microsoft Windows Out-of-Bounds Read Vulnerability

58/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2023-36033

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

58/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-21333

Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

57/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2023-32046

Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

57/100CVSS 7.8 KEVPatch verfügbar

CVE-2023-23376

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

57/100CVSS 7.8 KEVPatch verfügbar

CVE-2025-24990

Microsoft Windows Untrusted Pointer Dereference Vulnerability

56/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2024-38014

Microsoft Windows Installer Improper Privilege Management Vulnerability

56/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2024-38080

Microsoft Windows Hyper-V Privilege Escalation Vulnerability

56/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2022-26904

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

56/100CVSS 7.0 KEVPatch verfügbar

CVE-2022-24521

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

56/100CVSS 7.8 KEVPatch verfügbar

CVE-2025-60710

Microsoft Windows Link Following Vulnerability

55/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-24985

Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

55/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2024-26169

Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2024-30051

Microsoft DWM Core Library Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2023-21823

Microsoft Windows Graphic Component Privilege Escalation Vulnerability

55/100CVSS 7.8 KEVPatch verfügbar

CVE-2026-21519

Microsoft Windows Type Confusion Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-62221

Microsoft Windows Use After Free Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-59230

Microsoft Windows Improper Access Control Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2021-43226

Microsoft Windows Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-32709

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-32706

Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-32701

Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-30400

Microsoft Windows DWM Core Library Use-After-Free Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-24993

Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-21418

Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-21335

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2025-21334

Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2024-38107

Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVKein Patch verfügbar

CVE-2022-41073

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-41125

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2022-41033

Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-41357

Microsoft Win32k Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-40450

Microsoft Win32k Privilege Escalation Vulnerability

54/100CVSS 7.8 KEVPatch verfügbar

CVE-2021-43890

Microsoft Windows AppX Installer Spoofing Vulnerability

54/100CVSS 7.1 KEVPatch verfügbar

CVE-2026-81963

Microsoft Windows Link Following Vulnerability

53/100CVSS 7.8 KEVPatch verfügbar

CVE-2026-68820

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

53/100CVSS 7.0 KEVPatch verfügbar

CVE-2024-38106

Microsoft Windows Kernel Privilege Escalation Vulnerability

52/100CVSS 7.0 KEVKein Patch verfügbar

CVE-2024-38213

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

52/100CVSS 6.5 KEVKein Patch verfügbar

CVE-2025-62215

Microsoft Windows Race Condition Vulnerability

51/100CVSS 7.0 KEVKein Patch verfügbar

CVE-2025-21391

Microsoft Windows Storage Link Following Vulnerability

50/100CVSS 7.1 KEVKein Patch verfügbar

CVE-2023-28229

Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

50/100CVSS 7.0 KEVKein Patch verfügbar

CVE-2022-21919

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

50/100CVSS 7.0 KEVPatch verfügbar

CVE-2021-41379

Microsoft Windows Installer Privilege Escalation Vulnerability

50/100CVSS 5.5 KEVPatch verfügbar

CVE-2026-21525

Microsoft Windows NULL Pointer Dereference Vulnerability

47/100CVSS 6.2 KEVKein Patch verfügbar

CVE-2026-20805

Microsoft Windows Information Disclosure Vulnerability

45/100CVSS 5.5 KEVKein Patch verfügbar

CVE-2024-38217

Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

45/100CVSS 5.4 KEVKein Patch verfügbar

CVE-2023-36584

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

43/100CVSS 5.4 KEVKein Patch verfügbar

CVE-2022-41049

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

43/100CVSS 5.4 KEVPatch verfügbar

CVE-2025-24991

Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

42/100CVSS 5.5 KEVKein Patch verfügbar

CVE-2022-41091

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

42/100CVSS 5.4 KEVPatch verfügbar

CVE-2025-24984

Microsoft Windows NTFS Information Disclosure Vulnerability

38/100CVSS 4.6 KEVKein Patch verfügbar

ICS-Advisories

Advisories von CISA oder direkt vom Hersteller.

Keine ICS-Advisories für dieses Produkt bekannt