Microsoft Windows 11 Version 24H2 vulnerabilities
3,567 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,567
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL112HIGH2582MEDIUM864LOW9
Vulnerabilities
Page 18 of 179
CVE-2025-50177P3HIGHCVSS 8.1≥ 10.0.26100.0, < 10.0.26100.49462025-08-12
CVE-2025-50177 [HIGH] CWE-362 CVE-2025-50177: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49104P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49104 [HIGH] CWE-122 CVE-2024-49104: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-49102P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49102 [HIGH] CWE-122 CVE-2024-49102: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2025-21223P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21223 [HIGH] CWE-122 CVE-2025-21223: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43622P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43622 [HIGH] CWE-122 CVE-2024-43622: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43620P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43620 [HIGH] CWE-122 CVE-2024-43620: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43621P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43621 [HIGH] CWE-122 CVE-2024-43621: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21239P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21239 [HIGH] CWE-122 CVE-2025-21239: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21241P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21241 [HIGH] CWE-122 CVE-2025-21241: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21248P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21248 [HIGH] CWE-122 CVE-2025-21248: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2026-105008P3CRITICALCVSS 9.0≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-105008 [CRITICAL] CWE-420 CVE-2026-105008: No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-33066P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.43492025-06-10
CVE-2025-33066 [HIGH] CWE-122 CVE-2025-33066: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108463P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-108463 [HIGH] CWE-41 CVE-2026-108463: Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to by
Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-47289P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.86552026-06-09
CVE-2026-47289 [HIGH] CWE-122 CVE-2026-47289: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73018P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-73018 [HIGH] CWE-122 CVE-2026-73018: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83998P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-83998 [HIGH] CWE-122 CVE-2026-83998: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72986P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-72986 [HIGH] CWE-122 CVE-2026-72986: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-68828P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-68828 [HIGH] CWE-122 CVE-2026-68828: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62785P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-62785 [HIGH] CWE-122 CVE-2026-62785: Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unautho
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-54990P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-54990 [HIGH] CWE-122 CVE-2026-54990: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd