Microsoft Windows 11 24H2 vulnerabilities
1,030 known vulnerabilities affecting microsoft/windows_11_24h2.
Total CVEs
1,030
CISA KEV
38
actively exploited
Public exploits
18
Exploited in wild
8
Severity breakdown
CRITICAL14HIGH716MEDIUM296LOW4
Vulnerabilities
Page 37 of 52
CVE-2025-21179MEDIUMCVSS 4.8fixed in 10.0.26100.31072025-02-11
CVE-2025-21179 [MEDIUM] CWE-125 CVE-2025-21179: DHCP Client Service Denial of Service Vulnerability
DHCP Client Service Denial of Service Vulnerability
nvd
CVE-2025-21349MEDIUMCVSS 6.8fixed in 10.0.26100.31942025-02-11
CVE-2025-21349 [MEDIUM] CWE-287 CVE-2025-21349: Windows Remote Desktop Configuration Service Tampering Vulnerability
Windows Remote Desktop Configuration Service Tampering Vulnerability
nvd
CVE-2025-21254MEDIUMCVSS 6.5fixed in 10.0.26100.31942025-02-11
CVE-2025-21254 [MEDIUM] CWE-125 CVE-2025-21254: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21352MEDIUMCVSS 6.5fixed in 10.0.26100.31942025-02-11
CVE-2025-21352 [MEDIUM] CWE-400 CVE-2025-21352: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21325HIGHCVSS 7.8fixed in 10.0.26100.28942025-01-17
CVE-2025-21325 [HIGH] CWE-732 CVE-2025-21325: Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
nvd
CVE-2025-21311CRITICALCVSS 9.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21311 [CRITICAL] CWE-303 CVE-2025-21311: Windows NTLM V1 Elevation of Privilege Vulnerability
Windows NTLM V1 Elevation of Privilege Vulnerability
nvd
CVE-2025-21307CRITICALCVSS 9.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21307 [CRITICAL] CWE-416 CVE-2025-21307: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
nvd
CVE-2025-21239HIGHCVSS 8.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21239 [HIGH] CWE-122 CVE-2025-21239: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21293HIGHCVSS 8.8PoCfixed in 10.0.26100.28942025-01-14
CVE-2025-21293 [HIGH] CWE-284 CVE-2025-21293: Active Directory Domain Services Elevation of Privilege Vulnerability
Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2025-21378HIGHCVSS 7.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21378 [HIGH] CWE-122 CVE-2025-21378: Windows CSC Service Elevation of Privilege Vulnerability
Windows CSC Service Elevation of Privilege Vulnerability
nvd
CVE-2025-21300HIGHCVSS 7.5fixed in 10.0.26100.28942025-01-14
CVE-2025-21300 [HIGH] CWE-400 CVE-2025-21300: Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
nvd
CVE-2025-21409HIGHCVSS 8.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21409 [HIGH] CWE-122 CVE-2025-21409: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21234HIGHCVSS 7.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21234 [HIGH] CWE-20 CVE-2025-21234: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
nvd
CVE-2025-21339HIGHCVSS 8.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21339 [HIGH] CWE-122 CVE-2025-21339: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21417HIGHCVSS 8.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21417 [HIGH] CWE-122 CVE-2025-21417: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21370HIGHCVSS 8.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21370 [HIGH] CWE-20 CVE-2025-21370: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
nvd
CVE-2025-21281HIGHCVSS 7.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21281 [HIGH] CWE-416 CVE-2025-21281: Microsoft COM for Windows Elevation of Privilege Vulnerability
Microsoft COM for Windows Elevation of Privilege Vulnerability
nvd
CVE-2025-21286HIGHCVSS 8.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21286 [HIGH] CWE-122 CVE-2025-21286: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21303HIGHCVSS 8.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21303 [HIGH] CWE-122 CVE-2025-21303: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21244HIGHCVSS 8.8fixed in 10.0.26100.28942025-01-14
CVE-2025-21244 [HIGH] CWE-190 CVE-2025-21244: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd