Microsoft Windows 11 24H2 vulnerabilities
3,070 known vulnerabilities affecting microsoft/windows_11_24h2.
Total CVEs
3,070
CISA KEV
44
actively exploited
Public exploits
29
Exploited in wild
50
Severity breakdown
CRITICAL92HIGH2229MEDIUM741LOW8
Vulnerabilities
Page 37 of 154
CVE-2026-50484P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-50484 [HIGH] CWE-122 CVE-2026-50484: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49175P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-49175 [HIGH] CWE-122 CVE-2026-49175: Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58538P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-58538 [HIGH] CWE-122 CVE-2026-58538: Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50363P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-50363 [HIGH] CWE-122 CVE-2026-50363: Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50489P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-50489 [HIGH] CWE-122 CVE-2026-50489: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50477P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-50477 [HIGH] CWE-122 CVE-2026-50477: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-56175P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-56175 [HIGH] CWE-122 CVE-2026-56175: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-54986P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-54986 [HIGH] CWE-122 CVE-2026-54986: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85373P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-85373 [HIGH] CWE-122 CVE-2026-85373: Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96318P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-96318 [HIGH] CWE-122 CVE-2026-96318: Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96312P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-96312 [HIGH] CWE-122 CVE-2026-96312: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96856P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-96856 [HIGH] CWE-122 CVE-2026-96856: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96217P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-96217 [HIGH] CWE-122 CVE-2026-96217: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33841P3HIGHCVSS 7.8fixed in 10.0.26100.83902026-05-12
CVE-2026-33841 [HIGH] CWE-122 CVE-2026-33841: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83931P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-83931 [HIGH] CWE-122 CVE-2026-83931: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
nvd
CVE-2026-26180P3HIGHCVSS 7.8fixed in 10.0.26100.82462026-04-14
CVE-2026-26180 [HIGH] CWE-122 CVE-2026-26180: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50375P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-50375 [HIGH] CWE-122 CVE-2026-50375: Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-58726P3HIGHCVSS 7.5fixed in 10.0.26100.68992025-10-14
CVE-2025-58726 [HIGH] CWE-284 CVE-2025-58726: Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges ov
Improper access control in Windows SMB Server allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-87711P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-87711 [HIGH] CWE-121 CVE-2026-87711: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38244P3HIGHCVSS 7.8fixed in 10.0.26100.17422024-09-10
CVE-2024-38244 [HIGH] CWE-20 CVE-2024-38244: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd