CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 05:50 UTC)

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,436; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product microsoft:windows_11_21h2. Show all products

70 CVEs, showing 51 to 70PreviousPage 2 of 2

CVE	Severity	Title	Published
CVE-2022-22047 Known exploited	High 7.8	Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability Assigned by microsoft	Jul 12, 2022
CVE-2022-30190 Known exploited	High 7.8	Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Assigned by microsoft	Jun 1, 2022
CVE-2022-26925 Known exploited	High 8.1	Windows LSA Spoofing Vulnerability Assigned by microsoft	May 10, 2022
CVE-2022-26923 Known exploited	High 8.8	Active Directory Domain Services Elevation of Privilege Vulnerability Assigned by microsoft	May 10, 2022
CVE-2022-26904 Known exploited	High 7.0	Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-24545	High 8.1	Windows Kerberos Remote Code Execution Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-24521 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-24486	High 7.8	Windows Kerberos Elevation of Privilege Vulnerability Assigned by microsoft	Apr 15, 2022
CVE-2022-22718 Known exploited	High 7.8	Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft	Feb 9, 2022
CVE-2022-21999 Known exploited	High 7.8	Windows Print Spooler Elevation of Privilege Vulnerability Assigned by microsoft	Feb 9, 2022
CVE-2022-21971 Known exploited	High 7.8	Windows Runtime Remote Code Execution Vulnerability Assigned by microsoft	Feb 9, 2022
CVE-2022-21919 Known exploited	High 7.0	Windows User Profile Service Elevation of Privilege Vulnerability Assigned by microsoft	Jan 11, 2022
CVE-2022-21882 Known exploited	High 7.0	Win32k Elevation of Privilege Vulnerability Assigned by microsoft	Jan 11, 2022
CVE-2021-43226 Known exploited	High 7.8	Windows Common Log File System Driver Elevation of Privilege Vulnerability Assigned by microsoft	Dec 15, 2021
CVE-2021-41379 Known exploited	Medium 5.5	Windows Installer Elevation of Privilege Vulnerability Assigned by microsoft	Nov 10, 2021
CVE-2021-41357 Known exploited	High 7.8	Win32k Elevation of Privilege Vulnerability Assigned by microsoft	Oct 13, 2021
CVE-2021-40450 Known exploited	High 7.8	Win32k Elevation of Privilege Vulnerability Assigned by microsoft	Oct 13, 2021
CVE-2021-40449 Known exploited	High 7.8	Win32k Elevation of Privilege Vulnerability Assigned by microsoft	Oct 13, 2021
CVE-2021-34527 Known exploited	High 8.8	Windows Print Spooler Remote Code Execution Vulnerability Assigned by microsoft	Jul 2, 2021
CVE-2013-3900 Known exploited	Medium 5.5	WinVerifyTrust Signature Validation Vulnerability Assigned by microsoft	Dec 11, 2013

PreviousPage 2 of 2

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.