Microsoft Windows 11 24H2 vulnerabilities

CVE-2026-40422 [MEDIUM] CWE-908 CVE-2026-40422: Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose inf Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.

CVE-2026-50401 [MEDIUM] CWE-125 CVE-2026-50401: Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclo Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.

CVE-2026-50455 [MEDIUM] CWE-908 CVE-2026-50455: Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.

CVE-2026-54997 [MEDIUM] CWE-908 CVE-2026-54997: Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information l Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

CVE-2026-50300 [MEDIUM] CWE-125 CVE-2026-50300: Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose i Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-45594 [MEDIUM] CWE-200 CVE-2026-45594: Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) S Exposure of sensitive information to an unauthorized actor in Windows Application Identity (AppID) Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-42969 [MEDIUM] CWE-908 CVE-2026-42969: Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclos Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally.

CVE-2026-85815 [MEDIUM] CWE-125 CVE-2026-85815: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

CVE-2026-96859 [MEDIUM] CWE-125 CVE-2026-96859: Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose informatio Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-96247 [MEDIUM] CWE-908 CVE-2026-96247: Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclo Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-96314 [MEDIUM] CWE-125 CVE-2026-96314: Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information lo Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-85336 [MEDIUM] CWE-125 CVE-2026-85336: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

CVE-2026-88140 [MEDIUM] CWE-125 CVE-2026-88140: Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose informa Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

CVE-2026-85852 [MEDIUM] CWE-125 CVE-2026-85852: Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose i Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

CVE-2026-83760 [MEDIUM] CWE-125 CVE-2026-83760: Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose informati Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.

CVE-2026-96846 [MEDIUM] CWE-125 CVE-2026-96846: Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

CVE-2026-87698 [MEDIUM] CWE-125 CVE-2026-87698: Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.

CVE-2026-45634 [MEDIUM] CWE-125 CVE-2026-45634: Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information loca Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.

CVE-2026-83875 [MEDIUM] CWE-125 CVE-2026-83875: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2025-55334 [MEDIUM] CWE-312 CVE-2025-55334: Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypa Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security feature locally.