Microsoft Windows 11 Version 24H2 vulnerabilities
3,567 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,567
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL112HIGH2582MEDIUM864LOW9
Vulnerabilities
Page 20 of 179
CVE-2026-85371P3HIGHCVSS 8.1≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85371 [HIGH] CWE-416 CVE-2026-85371: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-54110P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.65842025-09-09
CVE-2025-54110 [HIGH] CWE-190 CVE-2025-54110: Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42980P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.86552026-06-09
CVE-2026-42980 [HIGH] CWE-122 CVE-2026-42980: Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elev
Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70207P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70207 [HIGH] CWE-122 CVE-2026-70207: Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute c
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69514P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69514 [HIGH] CWE-122 CVE-2026-69514: Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execu
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69688P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69688 [HIGH] CWE-122 CVE-2026-69688: Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-33829P3MEDIUMCVSS 4.3PoC≥ 10.0.26100.0, < 10.0.26100.82462026-04-14
CVE-2026-33829 [MEDIUM] CWE-200 CVE-2026-33829: Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauth
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-59295P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.68992025-10-14
CVE-2025-59295 [HIGH] CWE-122 CVE-2025-59295: Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-38115P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.14572024-08-13
CVE-2024-38115 [HIGH] CWE-122 CVE-2024-38115: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2024-38130P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.14572024-08-13
CVE-2024-38130 [HIGH] CWE-122 CVE-2024-38130: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2024-38114P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.14572024-08-13
CVE-2024-38114 [HIGH] CWE-122 CVE-2024-38114: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
nvd
CVE-2024-43533P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.20332024-10-08
CVE-2024-43533 [HIGH] CWE-416 CVE-2024-43533: Remote Desktop Client Remote Code Execution Vulnerability
Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2025-27477P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-27477 [HIGH] CWE-122 CVE-2025-27477: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-21303P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21303 [HIGH] CWE-122 CVE-2025-21303: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21302P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21302 [HIGH] CWE-122 CVE-2025-21302: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21305P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21305 [HIGH] CWE-122 CVE-2025-21305: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21252P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21252 [HIGH] CWE-122 CVE-2025-21252: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21306P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21306 [HIGH] CWE-122 CVE-2025-21306: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2024-43582P3HIGHCVSS 8.1≥ 10.0.26100.0, < 10.0.26100.20332024-10-08
CVE-2024-43582 [HIGH] CWE-416 CVE-2024-43582: Remote Desktop Protocol Server Remote Code Execution Vulnerability
Remote Desktop Protocol Server Remote Code Execution Vulnerability
nvd
CVE-2025-27481P3HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-27481 [HIGH] CWE-121 CVE-2025-27481: Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute
Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd