Microsoft Windows 11 Version 24H2 vulnerabilities
3,562 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,562
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL113HIGH2579MEDIUM861LOW9
Vulnerabilities
Page 101 of 179
CVE-2026-84014P3HIGHCVSS 7.0≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-84014 [HIGH] CWE-122 CVE-2026-84014: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85827P3HIGHCVSS 7.0≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85827 [HIGH] CWE-122 CVE-2026-85827: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83683P3MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83683 [MEDIUM] CWE-36 CVE-2026-83683: Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to dis
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-20812P3MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.76232026-01-13
CVE-2026-20812 [MEDIUM] CWE-20 CVE-2026-20812: Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authoriz
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
nvd
CVE-2026-85840P3MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85840 [MEDIUM] CWE-552 CVE-2026-85840: Files or directories accessible to external parties in Windows Event Viewer allows an authorized att
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-88137P3MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-88137 [MEDIUM] CWE-552 CVE-2026-88137: Files or directories accessible to external parties in WebDAV allows an authorized attacker to discl
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97828P3MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-97828 [MEDIUM] CWE-126 CVE-2026-97828: Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2025-21220P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21220 [HIGH] CWE-908 CVE-2025-21220: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2025-55698P3HIGHCVSS 7.7≥ 10.0.26100.0, < 10.0.26100.68992025-10-14
CVE-2025-55698 [HIGH] CWE-476 CVE-2025-55698: Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a net
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network.
nvd
CVE-2024-30073P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.17422024-09-10
CVE-2024-30073 [HIGH] CWE-41 CVE-2024-30073: Windows Security Zone Mapping Security Feature Bypass Vulnerability
Windows Security Zone Mapping Security Feature Bypass Vulnerability
nvd
CVE-2024-49107P3HIGHCVSS 7.3≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49107 [HIGH] CWE-59 CVE-2024-49107: WmsRepair Service Elevation of Privilege Vulnerability
WmsRepair Service Elevation of Privilege Vulnerability
nvd
CVE-2024-43641P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43641 [HIGH] CWE-190 CVE-2024-43641: Windows Registry Elevation of Privilege Vulnerability
Windows Registry Elevation of Privilege Vulnerability
nvd
CVE-2024-43509P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.20332024-10-08
CVE-2024-43509 [HIGH] CWE-416 CVE-2024-43509: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-43551P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.20332024-10-08
CVE-2024-43551 [HIGH] CWE-59 CVE-2024-43551: Windows Storage Elevation of Privilege Vulnerability
Windows Storage Elevation of Privilege Vulnerability
nvd
CVE-2025-21275P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21275 [HIGH] CWE-285 CVE-2025-21275: Windows App Package Installer Elevation of Privilege Vulnerability
Windows App Package Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-49072P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49072 [HIGH] CWE-122 CVE-2024-49072: Windows Task Scheduler Elevation of Privilege Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
nvd
CVE-2024-43457P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.17422024-09-10
CVE-2024-43457 [HIGH] CWE-428 CVE-2024-43457: Windows Setup and Deployment Elevation of Privilege Vulnerability
Windows Setup and Deployment Elevation of Privilege Vulnerability
nvd
CVE-2025-21281P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21281 [HIGH] CWE-416 CVE-2025-21281: Microsoft COM for Windows Elevation of Privilege Vulnerability
Microsoft COM for Windows Elevation of Privilege Vulnerability
nvd
CVE-2025-21234P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21234 [HIGH] CWE-20 CVE-2025-21234: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
nvd
CVE-2025-21235P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21235 [HIGH] CWE-20 CVE-2025-21235: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
nvd