Microsoft Windows 11 Version 24H2 vulnerabilities

1,186 known vulnerabilities affecting microsoft/windows_11_version_24h2.

Total CVEs
1,186
CISA KEV
43
actively exploited
Public exploits
18
Exploited in wild
14
Severity breakdown
CRITICAL17HIGH827MEDIUM337LOW5

Vulnerabilities

Page 43 of 60
CVE-2025-21216MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21216 [MEDIUM] CWE-125 CVE-2025-21216: Internet Connection Sharing (ICS) Denial of Service Vulnerability Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21179MEDIUMCVSS 4.8≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21179 [MEDIUM] CWE-125 CVE-2025-21179: DHCP Client Service Denial of Service Vulnerability DHCP Client Service Denial of Service Vulnerability
nvd
CVE-2025-21349MEDIUMCVSS 6.8≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21349 [MEDIUM] CWE-287 CVE-2025-21349: Windows Remote Desktop Configuration Service Tampering Vulnerability Windows Remote Desktop Configuration Service Tampering Vulnerability
nvd
CVE-2025-21254MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21254 [MEDIUM] CWE-125 CVE-2025-21254: Internet Connection Sharing (ICS) Denial of Service Vulnerability Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21350MEDIUMCVSS 5.9≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21350 [MEDIUM] CWE-20 Windows Kerberos Denial of Service Vulnerability Windows Kerberos Denial of Service Vulnerability Windows Kerberos Denial of Service Vulnerability
cvelistv5
CVE-2025-21352MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21352 [MEDIUM] CWE-400 CVE-2025-21352: Internet Connection Sharing (ICS) Denial of Service Vulnerability Internet Connection Sharing (ICS) Denial of Service Vulnerability
nvd
CVE-2025-21337LOWCVSS 3.3≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21337 [LOW] CWE-284 Windows NTFS Elevation of Privilege Vulnerability Windows NTFS Elevation of Privilege Vulnerability Windows NTFS Elevation of Privilege Vulnerability
cvelistv5
CVE-2025-21325HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-17
CVE-2025-21325 [HIGH] CWE-732 CVE-2025-21325: Windows Secure Kernel Mode Elevation of Privilege Vulnerability Windows Secure Kernel Mode Elevation of Privilege Vulnerability
nvd
CVE-2025-21311CRITICALCVSS 9.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21311 [CRITICAL] CWE-303 CVE-2025-21311: Windows NTLM V1 Elevation of Privilege Vulnerability Windows NTLM V1 Elevation of Privilege Vulnerability
nvd
CVE-2025-21298CRITICALCVSS 9.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21298 [CRITICAL] CWE-416 Windows OLE Remote Code Execution Vulnerability Windows OLE Remote Code Execution Vulnerability Windows OLE Remote Code Execution Vulnerability
cvelistv5
CVE-2025-21307CRITICALCVSS 9.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21307 [CRITICAL] CWE-416 CVE-2025-21307: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
nvd
CVE-2025-21239HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21239 [HIGH] CWE-122 CVE-2025-21239: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21293HIGHCVSS 8.8PoC≥ 10.0.26100.0, < 10.0.26100.65842025-01-14
CVE-2025-21293 [HIGH] CWE-284 CVE-2025-21293: Active Directory Domain Services Elevation of Privilege Vulnerability Active Directory Domain Services Elevation of Privilege Vulnerability
nvd
CVE-2025-21378HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21378 [HIGH] CWE-122 CVE-2025-21378: Windows CSC Service Elevation of Privilege Vulnerability Windows CSC Service Elevation of Privilege Vulnerability
nvd
CVE-2025-21300HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21300 [HIGH] CWE-400 CVE-2025-21300: Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability
nvd
CVE-2025-21409HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21409 [HIGH] CWE-122 CVE-2025-21409: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21234HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21234 [HIGH] CWE-20 CVE-2025-21234: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
nvd
CVE-2025-21339HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21339 [HIGH] CWE-122 CVE-2025-21339: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21417HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21417 [HIGH] CWE-122 CVE-2025-21417: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21370HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.49462025-01-14
CVE-2025-21370 [HIGH] CWE-20 CVE-2025-21370: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
nvd
← Previous43 / 60Next →