Windows 11
Vendor:
First CVE: Oct 13, 2021 · Active for 4 years
600
Total CVEs
More Total CVEs than 100% of tracked products
120.0
Avg CVEs / Year
Higher CVE frequency than 100% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 49% of tracked products
0.2%
KEV Rate
Higher KEV Rate than 95% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Windows 11 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 13, 2021
4 years ago
Most Recent CVE
Aug 26, 2025
332 days ago
CVE Severity & Scoring
Windows 11600 CVEs
22%
74%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local361 (60.2%)
Network204 (34.0%)
Unknown0 (0.0%)
Physical16 (2.7%)
Adjacent Network19 (3.2%)
Attack Complexity
Low485 (80.8%)
High115 (19.2%)
Unknown0 (0.0%)
User Interaction
None495 (82.5%)
Unknown0 (0.0%)
Required104 (17.3%)
Privileges Required
Low383 (63.8%)
High16 (2.7%)
None201 (33.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (600 CVEs).
600 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-40449HIGH Win32k Elevation of Privilege Vulnerability | Oct 13, 2021 | 7.8 | 94 | YES | YES |
CVE-2022-21907CRITICAL HTTP Protocol Stack Remote Code Execution Vulnerability | Jan 11, 2022 | 9.8 | 87 | NO | YES |
CVE-2022-26809CRITICAL Remote Procedure Call Runtime Remote Code Execution Vulnerability | Apr 15, 2022 | 9.8 | 80 | NO | NO |
CVE-2023-21758HIGH Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | Jan 10, 2023 | 7.5 | 75 | NO | NO |
CVE-2022-30216HIGH Windows Server Service Tampering Vulnerability | Jul 12, 2022 | 8.8 | 75 | NO | NO |
CVE-2022-37958HIGH SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability | Sep 13, 2022 | 8.1 | 73 | NO | NO |
CVE-2023-21768HIGH Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Jan 10, 2023 | 7.8 | 72 | NO | YES |
CVE-2022-34721CRITICAL Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability | Sep 13, 2022 | 9.8 | 72 | NO | NO |
CVE-2022-21972HIGH Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | May 10, 2022 | 8.1 | 70 | NO | NO |
CVE-2022-23270HIGH Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | May 10, 2022 | 8.1 | 62 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (600 CVEs).
CISA KEV
1 CVE
0.2% of CVEs· 95th percentile
Metasploit
2 CVEs
0.3% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
0.3% of CVEs· 87th percentile
Social Chatter
Signals from CVEs in this product scope (600 CVEs).
Media Mentions
Signals from CVEs in this product scope (600 CVEs).
Top CNAs Publishing CVEs For Windows 11
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 22h2 | 122 | 7.3 | 4.4% | 0 | 2 |
| 21h2 | 13 | 6.8 | 13.7% | 0 | 2 |