Microsoft Windows 11 24H2 vulnerabilities

CVE-2024-49087 [MEDIUM] CWE-20 CVE-2024-49087: Windows Mobile Broadband Driver Information Disclosure Vulnerability Windows Mobile Broadband Driver Information Disclosure Vulnerability

CVE-2025-24997 [MEDIUM] CWE-476 CVE-2025-24997: Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service loca Null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.

CVE-2025-29839 [MEDIUM] CWE-125 CVE-2025-29839: Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information lo Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.

CVE-2026-45642 [LOW] CWE-20 CVE-2026-45642: Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Servi Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.

CVE-2025-59280 [LOW] CWE-287 CVE-2025-59280: Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering o Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.

CVE-2025-21179 [MEDIUM] CWE-125 CVE-2025-21179: DHCP Client Service Denial of Service Vulnerability DHCP Client Service Denial of Service Vulnerability

CVE-2025-21210 [MEDIUM] CWE-636 CVE-2025-21210: Windows BitLocker Information Disclosure Vulnerability Windows BitLocker Information Disclosure Vulnerability

CVE-2025-21214 [MEDIUM] CWE-200 CVE-2025-21214: Windows BitLocker Information Disclosure Vulnerability Windows BitLocker Information Disclosure Vulnerability

CVE-2026-50416 [LOW] CWE-200 CVE-2026-50416: Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized at Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.

CVE-2025-55695 [LOW] CWE-125 CVE-2025-55695: Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose inf Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.

CVE-2026-50419 [LOW] CWE-200 CVE-2026-50419: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized at Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-57085 [LOW] CWE-125 CVE-2026-57085: Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.