Microsoft Windows 11 Version 24H2 vulnerabilities

CVE-2025-62472 [HIGH] CWE-416 CVE-2025-62472: Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attac Use of uninitialized resource in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-26132 [HIGH] CWE-416 CVE-2026-26132: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-33840 [HIGH] CWE-416 CVE-2026-33840: Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2026-69638 [HIGH] CWE-122 CVE-2026-69638: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-69479 [HIGH] CWE-122 CVE-2026-69479: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-54122 [HIGH] CWE-122 CVE-2026-54122: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.

CVE-2026-70111 [HIGH] CWE-822 CVE-2026-70111: Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privilege Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-25172 [HIGH] CWE-122 CVE-2026-25172: Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authori Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

CVE-2026-25173 [HIGH] CWE-122 CVE-2026-25173: Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authori Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

CVE-2026-42981 [HIGH] CWE-191 CVE-2026-42981: Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacke Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

CVE-2026-42974 [HIGH] CWE-190 CVE-2026-42974: Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to exe Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.

CVE-2026-26111 [HIGH] CWE-122 CVE-2026-26111: Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authori Integer overflow or wraparound in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.

CVE-2026-69623 [HIGH] CWE-122 CVE-2026-69623: Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute c Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network.

CVE-2026-20922 [HIGH] CWE-122 CVE-2026-20922: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-69847 [HIGH] CWE-122 CVE-2026-69847: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

CVE-2024-38148 [HIGH] CWE-125 CVE-2024-38148: Windows Secure Channel Denial of Service Vulnerability Windows Secure Channel Denial of Service Vulnerability

CVE-2026-23674 [HIGH] CWE-41 CVE-2026-23674: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to b Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-70108 [HIGH] CWE-122 CVE-2026-70108: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70106 [HIGH] CWE-122 CVE-2026-70106: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96929 [HIGH] CWE-122 CVE-2026-96929: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.