Microsoft Windows 11 Version 24H2 vulnerabilities
3,567 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,567
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL112HIGH2582MEDIUM864LOW9
Vulnerabilities
Page 16 of 179
CVE-2026-88219P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-88219 [HIGH] CWE-822 CVE-2026-88219: Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-81955P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-81955 [HIGH] CWE-122 CVE-2026-81955: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73016P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-73016 [HIGH] CWE-122 CVE-2026-73016: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69334P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69334 [HIGH] CWE-122 CVE-2026-69334: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69601P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69601 [HIGH] CWE-122 CVE-2026-69601: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73023P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-73023 [HIGH] CWE-122 CVE-2026-73023: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69291P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69291 [HIGH] CWE-122 CVE-2026-69291: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62744P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-62744 [HIGH] CWE-122 CVE-2026-62744: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69360P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69360 [HIGH] CWE-122 CVE-2026-69360: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69860P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69860 [HIGH] CWE-122 CVE-2026-69860: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69386P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69386 [HIGH] CWE-122 CVE-2026-69386: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-77495P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-77495 [HIGH] CWE-122 CVE-2026-77495: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-77504P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-77504 [HIGH] CWE-415 CVE-2026-77504: Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69772P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69772 [HIGH] CWE-122 CVE-2026-69772: Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85877P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-85877 [HIGH] CWE-122 CVE-2026-85877: Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to ex
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69495P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69495 [HIGH] CWE-122 CVE-2026-69495: Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execu
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69511P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69511 [HIGH] CWE-122 CVE-2026-69511: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69434P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69434 [HIGH] CWE-122 CVE-2026-69434: Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72933P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-72933 [HIGH] CWE-122 CVE-2026-72933: Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69669P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69669 [HIGH] CWE-122 CVE-2026-69669: Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
nvd