Microsoft Windows 11 Version 24H2 vulnerabilities
3,567 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,567
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL113HIGH2583MEDIUM862LOW9
Vulnerabilities
Page 44 of 179
CVE-2026-83860P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83860 [HIGH] CWE-121 CVE-2026-83860: Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a ne
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-70233P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70233 [HIGH] CWE-122 CVE-2026-70233: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26668P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-26668 [HIGH] CWE-122 CVE-2025-26668: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-21236P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.78402026-02-10
CVE-2026-21236 [HIGH] CWE-122 CVE-2026-21236: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83830P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83830 [HIGH] CWE-122 CVE-2026-83830: Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to ele
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70132P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70132 [HIGH] CWE-122 CVE-2026-70132: Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attack
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70103P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70103 [HIGH] CWE-122 CVE-2026-70103: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83514P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83514 [HIGH] CWE-122 CVE-2026-83514: Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to e
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83518P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-10-13
CVE-2026-83518 [HIGH] CWE-122 CVE-2026-83518: Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69354P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-10-13
CVE-2026-69354 [HIGH] CWE-122 CVE-2026-69354: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70048P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70048 [HIGH] CWE-122 CVE-2026-70048: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70112P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70112 [HIGH] CWE-122 CVE-2026-70112: Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code lo
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
nvd
CVE-2026-83881P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83881 [HIGH] CWE-122 CVE-2026-83881: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69949P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-69949 [HIGH] CWE-122 CVE-2026-69949: Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70143P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70143 [HIGH] CWE-122 CVE-2026-70143: Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute c
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
nvd
CVE-2026-70093P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70093 [HIGH] CWE-122 CVE-2026-70093: Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83569P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83569 [HIGH] CWE-122 CVE-2026-83569: Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-78459P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-78459 [HIGH] CWE-122 CVE-2026-78459: Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50501P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-50501 [HIGH] CWE-121 CVE-2026-50501: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-83698P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83698 [HIGH] CWE-122 CVE-2026-83698: Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacke
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
nvd