cbcvebase.

Microsoft Windows 11 24H2 vulnerabilities

3,295 known vulnerabilities affecting microsoft/windows_11_24h2.

Total CVEs
3,295
CISA KEV
44
actively exploited
Public exploits
29
Exploited in wild
50
Severity breakdown
CRITICAL99HIGH2400MEDIUM788LOW8

Vulnerabilities

Page 52 of 165
CVE-2026-83876P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-83876 [HIGH] CWE-416 CVE-2026-83876: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70023P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-70023 [HIGH] CWE-416 CVE-2026-70023: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83883P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-83883 [HIGH] CWE-416 CVE-2026-83883: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85945P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-85945 [HIGH] CWE-416 CVE-2026-85945: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88134P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-88134 [HIGH] CWE-416 CVE-2026-88134: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70218P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-70218 [HIGH] CWE-285 CVE-2026-70218: Insufficient granularity of access control in Windows StateRepository API allows an authorized attac Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83796P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-83796 [HIGH] CWE-416 CVE-2026-83796: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87694P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-87694 [HIGH] CWE-416 CVE-2026-87694: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83859P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-83859 [HIGH] CWE-416 CVE-2026-83859: Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49167P3HIGHCVSS 7.8fixed in 10.0.26100.88752026-07-14
CVE-2026-49167 [HIGH] CWE-416 CVE-2026-49167: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85906P3HIGHCVSS 7.8fixed in 10.0.26100.97112026-10-13
CVE-2026-85906 [HIGH] CWE-416 CVE-2026-85906: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-35417P3HIGHCVSS 7.8fixed in 10.0.26100.83902026-05-12
CVE-2026-35417 [HIGH] CWE-843 CVE-2026-35417: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71345P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-71345 [HIGH] CWE-787 CVE-2026-71345: Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally. Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally.
nvd
CVE-2026-62697P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-62697 [HIGH] CWE-416 CVE-2026-62697: Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-56172P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-56172 [HIGH] CWE-416 CVE-2026-56172: Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges lo Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69270P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69270 [HIGH] CWE-20 CVE-2026-69270: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69307P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69307 [HIGH] CWE-122 CVE-2026-69307: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69576P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69576 [HIGH] CWE-416 CVE-2026-69576: Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally. Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69571P3HIGHCVSS 7.8fixed in 10.0.26100.94452026-09-08
CVE-2026-69571 [HIGH] CWE-122 CVE-2026-69571: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65775P3HIGHCVSS 7.8fixed in 10.0.26100.91062026-08-11
CVE-2026-65775 [HIGH] CWE-416 CVE-2026-65775: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
← Previous52 / 165Next →
Microsoft Windows 11 24H2 vulnerabilities | cvebase