Microsoft Windows 11 24H2 vulnerabilities
3,505 known vulnerabilities affecting microsoft/windows_11_24h2.
Total CVEs
3,505
CISA KEV
44
actively exploited
Public exploits
29
Exploited in wild
50
Severity breakdown
CRITICAL106HIGH2545MEDIUM846LOW8
Vulnerabilities
Page 150 of 176
CVE-2026-70235P4MEDIUMCVSS 5.5fixed in 10.0.26100.97112026-10-13
CVE-2026-70235 [MEDIUM] CWE-862 CVE-2026-70235: Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing l
Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
nvd
CVE-2026-87709P4MEDIUMCVSS 5.5fixed in 10.0.26100.97112026-10-13
CVE-2026-87709 [MEDIUM] CWE-250 CVE-2026-87709: Improper access control in Windows Host Guardian Service allows an authorized attacker to perform ta
Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-72966P4MEDIUMCVSS 5.5fixed in 10.0.26100.94452026-09-08
CVE-2026-72966 [MEDIUM] CWE-862 CVE-2026-72966: Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to p
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-96316P4MEDIUMCVSS 5.5fixed in 10.0.26100.97112026-10-13
CVE-2026-96316 [MEDIUM] CWE-862 CVE-2026-96316: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att
Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-96855P4MEDIUMCVSS 5.5fixed in 10.0.26100.97112026-10-13
CVE-2026-96855 [MEDIUM] CWE-862 CVE-2026-96855: Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to p
Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-96311P4MEDIUMCVSS 5.5fixed in 10.0.26100.97112026-10-13
CVE-2026-96311 [MEDIUM] CWE-862 CVE-2026-96311: Improper authorization in Windows Network List Service allows an authorized attacker to perform tamp
Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-84011P4MEDIUMCVSS 5.5fixed in 10.0.26100.97112026-10-13
CVE-2026-84011 [MEDIUM] CWE-863 CVE-2026-84011: Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security fea
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-69474P4MEDIUMCVSS 4.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69474 [MEDIUM] CWE-126 CVE-2026-69474: Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over
Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-69384P4HIGHCVSS 7.1fixed in 10.0.26100.94452026-09-08
CVE-2026-69384 [HIGH] CWE-476 CVE-2026-69384: Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker
Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.
nvd
CVE-2026-40401P4HIGHCVSS 7.1fixed in 10.0.26100.83902026-05-12
CVE-2026-40401 [HIGH] CWE-476 CVE-2026-40401: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.
nvd
CVE-2024-49110P4MEDIUMCVSS 6.8fixed in 10.0.26100.26052024-12-12
CVE-2024-49110 [MEDIUM] CWE-125 CVE-2024-49110: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49073P4MEDIUMCVSS 6.8fixed in 10.0.26100.26052024-12-12
CVE-2024-49073 [MEDIUM] CWE-20 CVE-2024-49073: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49077P4MEDIUMCVSS 6.8fixed in 10.0.26100.26052024-12-12
CVE-2024-49077 [MEDIUM] CWE-125 CVE-2024-49077: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49078P4MEDIUMCVSS 6.8fixed in 10.0.26100.26052024-12-12
CVE-2024-49078 [MEDIUM] CWE-125 CVE-2024-49078: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49083P4MEDIUMCVSS 6.8fixed in 10.0.26100.26052024-12-12
CVE-2024-49083 [MEDIUM] CWE-125 CVE-2024-49083: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-49092P4MEDIUMCVSS 6.8fixed in 10.0.26100.26052024-12-12
CVE-2024-49092 [MEDIUM] CWE-125 CVE-2024-49092: Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43634P4MEDIUMCVSS 6.8fixed in 10.0.26100.23142024-11-12
CVE-2024-43634 [MEDIUM] CWE-125 CVE-2024-43634: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43449P4MEDIUMCVSS 6.8fixed in 10.0.26100.23142024-11-12
CVE-2024-43449 [MEDIUM] CWE-125 CVE-2024-43449: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43637P4MEDIUMCVSS 6.8fixed in 10.0.26100.23142024-11-12
CVE-2024-43637 [MEDIUM] CWE-125 CVE-2024-43637: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd
CVE-2024-43638P4MEDIUMCVSS 6.8fixed in 10.0.26100.23142024-11-12
CVE-2024-43638 [MEDIUM] CWE-125 CVE-2024-43638: Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
nvd