Microsoft Windows 11 24H2 vulnerabilities

CVE-2026-50499 [HIGH] CWE-122 CVE-2026-50499: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-50417 [HIGH] CWE-20 CVE-2026-50417: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-50336 [HIGH] CWE-122 CVE-2026-50336: Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges loca Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

CVE-2026-50327 [HIGH] CWE-122 CVE-2026-50327: Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.

CVE-2026-85800 [HIGH] CWE-122 CVE-2026-85800: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-85822 [HIGH] CWE-122 CVE-2026-85822: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

CVE-2026-85327 [HIGH] CWE-122 CVE-2026-85327: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85915 [HIGH] CWE-122 CVE-2026-85915: Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96920 [HIGH] CWE-122 CVE-2026-96920: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88168 [HIGH] CWE-122 CVE-2026-88168: Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-40377 [HIGH] CWE-122 CVE-2026-40377: Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevat Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.

CVE-2026-88193 [HIGH] CWE-122 CVE-2026-88193: Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate pr Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-69528 [HIGH] CWE-306 CVE-2026-69528: Missing authentication for critical function in Windows Shell allows an authorized attacker to eleva Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-61365 [HIGH] CWE-306 CVE-2026-61365: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61356 [HIGH] CWE-306 CVE-2026-61356: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-61364 [HIGH] CWE-306 CVE-2026-61364: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-42976 [HIGH] CWE-306 CVE-2026-42976: Missing authentication for critical function in Windows RPC API allows an authorized attacker to ele Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.

CVE-2026-61367 [HIGH] CWE-306 CVE-2026-61367: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-62777 [HIGH] CWE-306 CVE-2026-62777: Missing authentication for critical function in Windows License Manager allows an authorized attacke Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-45638 [HIGH] CWE-122 CVE-2026-45638: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.