Microsoft Windows 11 24H2 vulnerabilities
1,692 known vulnerabilities affecting microsoft/windows_11_24h2.
Total CVEs
1,692
CISA KEV
40
actively exploited
Public exploits
29
Exploited in wild
47
Severity breakdown
CRITICAL37HIGH1215MEDIUM432LOW8
Vulnerabilities
Page 82 of 85
CVE-2025-26644P4MEDIUMCVSS 5.1fixed in 10.0.26100.37752025-04-08
CVE-2025-26644 [MEDIUM] CWE-1039 CVE-2025-26644: Automated recognition mechanism with inadequate detection or handling of adversarial input perturbat
Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.
nvd
CVE-2025-33069P4MEDIUMCVSS 5.1fixed in 10.0.26100.42702025-06-10
CVE-2025-33069 [MEDIUM] CWE-347 CVE-2025-33069: Improper verification of cryptographic signature in App Control for Business (WDAC) allows an unauth
Improper verification of cryptographic signature in App Control for Business (WDAC) allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2025-21328P4MEDIUMCVSS 4.3fixed in 10.0.26100.28942025-01-14
CVE-2025-21328 [MEDIUM] CWE-41 CVE-2025-21328: MapUrlToZone Security Feature Bypass Vulnerability
MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2025-21329P4MEDIUMCVSS 4.3fixed in 10.0.26100.28942025-01-14
CVE-2025-21329 [MEDIUM] CWE-41 CVE-2025-21329: MapUrlToZone Security Feature Bypass Vulnerability
MapUrlToZone Security Feature Bypass Vulnerability
nvd
CVE-2025-55679P4MEDIUMCVSS 4.7fixed in 10.0.26100.68992025-10-14
CVE-2025-55679 [MEDIUM] CWE-20 CVE-2025-55679: Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information
Improper input validation in Windows Kernel allows an unauthorized attacker to disclose information locally.
nvd
CVE-2025-58719P4MEDIUMCVSS 4.7fixed in 10.0.26100.68992025-10-14
CVE-2025-58719 [MEDIUM] CWE-416 CVE-2025-58719: Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to eleva
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55332P4MEDIUMCVSS 4.6fixed in 10.0.26100.68992025-10-14
CVE-2025-55332 [MEDIUM] CWE-841 CVE-2025-55332: Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2025-55330P4MEDIUMCVSS 4.6fixed in 10.0.26100.68992025-10-14
CVE-2025-55330 [MEDIUM] CWE-841 CVE-2025-55330: Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2025-55337P4MEDIUMCVSS 4.6fixed in 10.0.26100.68992025-10-14
CVE-2025-55337 [MEDIUM] CWE-841 CVE-2025-55337: Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2025-55682P4MEDIUMCVSS 4.6fixed in 10.0.26100.68992025-10-14
CVE-2025-55682 [MEDIUM] CWE-841 CVE-2025-55682: Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-26175P4MEDIUMCVSS 4.6fixed in 10.0.26100.82462026-04-14
CVE-2026-26175 [MEDIUM] CWE-908 CVE-2026-26175: Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a se
Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-20825P4MEDIUMCVSS 4.4fixed in 10.0.26100.76232026-01-13
CVE-2026-20825 [MEDIUM] CWE-284 CVE-2026-20825: Improper access control in Windows Hyper-V allows an authorized attacker to disclose information loc
Improper access control in Windows Hyper-V allows an authorized attacker to disclose information locally.
nvd
CVE-2025-21254P4MEDIUMCVSS 6.5fixed in 10.0.26100.31942025-02-11
CVE-2025-21254 [MEDIUM] CWE-125 CVE-2025-21254: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21352P4MEDIUMCVSS 6.5fixed in 10.0.26100.31942025-02-11
CVE-2025-21352 [MEDIUM] CWE-400 CVE-2025-21352: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21212P4MEDIUMCVSS 6.5fixed in 10.0.26100.31942025-02-11
CVE-2025-21212 [MEDIUM] CWE-125 CVE-2025-21212: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21216P4MEDIUMCVSS 6.5fixed in 10.0.26100.31942025-02-11
CVE-2025-21216 [MEDIUM] CWE-125 CVE-2025-21216: Internet Connection Sharing (ICS) Denial of Service Vulnerability
Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2024-43546P4MEDIUMCVSS 5.6fixed in 10.0.26100.20332024-10-08
CVE-2024-43546 [MEDIUM] CWE-203 CVE-2024-43546: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2025-21336P4MEDIUMCVSS 5.6fixed in 10.0.26100.28942025-01-14
CVE-2025-21336 [MEDIUM] CWE-203 CVE-2025-21336: Windows Cryptographic Information Disclosure Vulnerability
Windows Cryptographic Information Disclosure Vulnerability
nvd
CVE-2025-21257P4MEDIUMCVSS 5.5fixed in 10.0.26100.28942025-01-14
CVE-2025-21257 [MEDIUM] CWE-125 CVE-2025-21257: Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
nvd
CVE-2024-43500P4MEDIUMCVSS 5.5fixed in 10.0.26100.20332024-10-08
CVE-2024-43500 [MEDIUM] CWE-126 CVE-2024-43500: Windows Resilient File System (ReFS) Information Disclosure Vulnerability
Windows Resilient File System (ReFS) Information Disclosure Vulnerability
nvd