# Microsoft Windows 11 22h2


- [CVE-2025-33053](https://insights.sbomify.com/CVE-2025-33053/): Microsoft Windows External Control of File Name or Path (high 8.8, exploited in the wild)
- [CVE-2025-33073](https://insights.sbomify.com/CVE-2025-33073/): Microsoft Windows SMB Client Improper Access Control (high 8.8, exploited in the wild)
- [CVE-2024-49039](https://insights.sbomify.com/CVE-2024-49039/): Microsoft Windows Task Scheduler Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2024-43461](https://insights.sbomify.com/CVE-2024-43461/): Microsoft Windows MSHTML Platform Spoofing (high 8.8, exploited in the wild)
- [CVE-2024-30040](https://insights.sbomify.com/CVE-2024-30040/): Microsoft Windows MSHTML Platform Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2024-29988](https://insights.sbomify.com/CVE-2024-29988/): Microsoft SmartScreen Prompt Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-36025](https://insights.sbomify.com/CVE-2023-36025/): Microsoft Windows SmartScreen Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-32049](https://insights.sbomify.com/CVE-2023-32049/): Microsoft Windows Defender SmartScreen Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-21674](https://insights.sbomify.com/CVE-2023-21674/): Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2022-41128](https://insights.sbomify.com/CVE-2022-41128/): Microsoft Windows Scripting Languages Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-34527](https://insights.sbomify.com/CVE-2021-34527/): Microsoft Windows Print Spooler Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2023-29360](https://insights.sbomify.com/CVE-2023-29360/): Microsoft Streaming Service Untrusted Pointer Dereference (high 8.4, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/windows-11-22h2/