Microsoft Windows 11 Version 24H2 vulnerabilities
3,567 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,567
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL113HIGH2583MEDIUM862LOW9
Vulnerabilities
Page 30 of 179
CVE-2026-70054P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70054 [HIGH] CWE-122 CVE-2026-70054: Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85908P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85908 [HIGH] CWE-122 CVE-2026-85908: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70286P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70286 [HIGH] CWE-122 CVE-2026-70286: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83867P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83867 [HIGH] CWE-122 CVE-2026-83867: Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85901P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85901 [HIGH] CWE-122 CVE-2026-85901: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70255P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70255 [HIGH] CWE-122 CVE-2026-70255: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70010P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70010 [HIGH] CWE-122 CVE-2026-70010: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69471P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-69471 [HIGH] CWE-122 CVE-2026-69471: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70138P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70138 [HIGH] CWE-122 CVE-2026-70138: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70059P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70059 [HIGH] CWE-122 CVE-2026-70059: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-108130P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-108130 [HIGH] CWE-122 CVE-2026-108130: Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authoriz
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83709P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83709 [HIGH] CWE-122 CVE-2026-83709: Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83678P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83678 [HIGH] CWE-122 CVE-2026-83678: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83779P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83779 [HIGH] CWE-122 CVE-2026-83779: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83757P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83757 [HIGH] CWE-122 CVE-2026-83757: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83652P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83652 [HIGH] CWE-122 CVE-2026-83652: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83691P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83691 [HIGH] CWE-122 CVE-2026-83691: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49789P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-49789 [HIGH] CWE-121 CVE-2026-49789: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83861P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83861 [HIGH] CWE-122 CVE-2026-83861: Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to eleva
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69284P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69284 [HIGH] CWE-122 CVE-2026-69284: Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
nvd