# Microsoft Windows 11 21h2


- [CVE-2024-43461](https://insights.sbomify.com/CVE-2024-43461/): Microsoft Windows MSHTML Platform Spoofing (high 8.8, exploited in the wild)
- [CVE-2024-30040](https://insights.sbomify.com/CVE-2024-30040/): Microsoft Windows MSHTML Platform Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2024-29988](https://insights.sbomify.com/CVE-2024-29988/): Microsoft SmartScreen Prompt Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-36025](https://insights.sbomify.com/CVE-2023-36025/): Microsoft Windows SmartScreen Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-32049](https://insights.sbomify.com/CVE-2023-32049/): Microsoft Windows Defender SmartScreen Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-21674](https://insights.sbomify.com/CVE-2023-21674/): Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2022-41128](https://insights.sbomify.com/CVE-2022-41128/): Microsoft Windows Scripting Languages Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2022-26923](https://insights.sbomify.com/CVE-2022-26923/): Microsoft Active Directory Domain Services Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2021-34527](https://insights.sbomify.com/CVE-2021-34527/): Microsoft Windows Print Spooler Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2023-29360](https://insights.sbomify.com/CVE-2023-29360/): Microsoft Streaming Service Untrusted Pointer Dereference (high 8.4, exploited in the wild)
- [CVE-2024-21412](https://insights.sbomify.com/CVE-2024-21412/): Microsoft Windows Internet Shortcut Files Security Feature Bypass (high 8.1, exploited in the wild)
- [CVE-2022-26925](https://insights.sbomify.com/CVE-2022-26925/): Microsoft Windows LSA Spoofing (high 8.1, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/windows-11-21h2/