Microsoft Windows 11 24H2 vulnerabilities
3,070 known vulnerabilities affecting microsoft/windows_11_24h2.
Total CVEs
3,070
CISA KEV
44
actively exploited
Public exploits
29
Exploited in wild
50
Severity breakdown
CRITICAL92HIGH2229MEDIUM741LOW8
Vulnerabilities
Page 35 of 154
CVE-2026-69323P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69323 [HIGH] CWE-122 CVE-2026-69323: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69444P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69444 [HIGH] CWE-122 CVE-2026-69444: Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate priv
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83970P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-83970 [HIGH] CWE-122 CVE-2026-83970: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72990P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-72990 [HIGH] CWE-122 CVE-2026-72990: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83983P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-83983 [HIGH] CWE-122 CVE-2026-83983: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69542P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69542 [HIGH] CWE-122 CVE-2026-69542: Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to e
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-77904P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-77904 [HIGH] CWE-122 CVE-2026-77904: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68888P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-68888 [HIGH] CWE-122 CVE-2026-68888: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73007P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-73007 [HIGH] CWE-122 CVE-2026-73007: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-78447P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-78447 [HIGH] CWE-122 CVE-2026-78447: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73021P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-73021 [HIGH] CWE-20 CVE-2026-73021: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69589P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69589 [HIGH] CWE-122 CVE-2026-69589: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68885P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-68885 [HIGH] CWE-122 CVE-2026-68885: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69420P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69420 [HIGH] CWE-122 CVE-2026-69420: Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72996P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-72996 [HIGH] CWE-20 CVE-2026-72996: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68890P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-68890 [HIGH] CWE-122 CVE-2026-68890: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65787P3HIGHCVSS 7.8fixed in 10.0.26100.91062026-08-11
CVE-2026-65787 [HIGH] CWE-122 CVE-2026-65787: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65814P3HIGHCVSS 7.8fixed in 10.0.26100.91062026-08-11
CVE-2026-65814 [HIGH] CWE-122 CVE-2026-65814: Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62700P3HIGHCVSS 7.8fixed in 10.0.26100.91062026-08-11
CVE-2026-62700 [HIGH] CWE-122 CVE-2026-62700: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61359P3HIGHCVSS 7.8fixed in 10.0.26100.91062026-08-11
CVE-2026-61359 [HIGH] CWE-122 CVE-2026-61359: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
nvd