cbcvebase.

Microsoft Windows 11 24H2 vulnerabilities

3,495 known vulnerabilities affecting microsoft/windows_11_24h2.

Total CVEs
3,495
CISA KEV
44
actively exploited
Public exploits
29
Exploited in wild
50
Severity breakdown
CRITICAL106HIGH2539MEDIUM842LOW8

Vulnerabilities

Page 112 of 175
CVE-2026-85364P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-85364 [HIGH] CWE-416 CVE-2026-85364: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88141P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-88141 [HIGH] CWE-416 CVE-2026-88141: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85361P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-85361 [HIGH] CWE-416 CVE-2026-85361: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87708P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-87708 [HIGH] CWE-416 CVE-2026-87708: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88124P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-88124 [HIGH] CWE-416 CVE-2026-88124: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96302P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-96302 [HIGH] CWE-416 CVE-2026-96302: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96305P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-96305 [HIGH] CWE-416 CVE-2026-96305: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96216P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-96216 [HIGH] CWE-416 CVE-2026-96216: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102211P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-102211 [HIGH] CWE-362 CVE-2026-102211: Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96313P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-96313 [HIGH] CWE-306 CVE-2026-96313: Missing authentication for critical function in Windows Push Notifications allows an authorized atta Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62780P3HIGHCVSS 7.0fixed in 10.0.26100.91062026-08-11
CVE-2026-62780 [HIGH] CWE-362 CVE-2026-62780: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85846P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-85846 [HIGH] CWE-416 CVE-2026-85846: Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges lo Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96307P3HIGHCVSS 7.0fixed in 10.0.26100.97112026-10-13
CVE-2026-96307 [HIGH] CWE-416 CVE-2026-96307: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-50166P3MEDIUMCVSS 6.5fixed in 10.0.26100.48512025-08-12
CVE-2025-50166 [MEDIUM] CWE-190 CVE-2025-50166: Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized a Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-83649P3MEDIUMCVSS 6.5fixed in 10.0.26100.97112026-10-13
CVE-2026-83649 [MEDIUM] CWE-125 CVE-2026-83649: Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorize Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83667P3MEDIUMCVSS 6.5fixed in 10.0.26100.97112026-10-13
CVE-2026-83667 [MEDIUM] CWE-125 CVE-2026-83667: Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83648P3MEDIUMCVSS 6.5fixed in 10.0.26100.97112026-10-13
CVE-2026-83648 [MEDIUM] CWE-476 CVE-2026-83648: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-69374P3MEDIUMCVSS 6.5fixed in 10.0.26100.94452026-09-08
CVE-2026-69374 [MEDIUM] CWE-770 CVE-2026-69374: Allocation of resources without limits or throttling in Windows SMB Server allows an authorized atta Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83521P3MEDIUMCVSS 6.5fixed in 10.0.26100.97112026-10-13
CVE-2026-83521 [MEDIUM] CWE-125 CVE-2026-83521: Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information ov Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-56186P3MEDIUMCVSS 6.5fixed in 10.0.26100.88752026-07-14
CVE-2026-56186 [MEDIUM] CWE-125 CVE-2026-56186: Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.
nvd
← Previous112 / 175Next →
Microsoft Windows 11 24H2 vulnerabilities | cvebase