Microsoft Windows 11 Version 24H2 vulnerabilities

1,186 known vulnerabilities affecting microsoft/windows_11_version_24h2.

Total CVEs
1,186
CISA KEV
43
actively exploited
Public exploits
18
Exploited in wild
14
Severity breakdown
CRITICAL17HIGH827MEDIUM337LOW5

Vulnerabilities

Page 46 of 60
CVE-2025-21275HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21275 [HIGH] CWE-285 CVE-2025-21275: Windows App Package Installer Elevation of Privilege Vulnerability Windows App Package Installer Elevation of Privilege Vulnerability
nvd
CVE-2025-21236HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21236 [HIGH] CWE-122 CVE-2025-21236: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21290HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21290 [HIGH] CWE-400 CVE-2025-21290: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-21270HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21270 [HIGH] CWE-400 CVE-2025-21270: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-21245HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21245 [HIGH] CWE-122 CVE-2025-21245: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21250HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21250 [HIGH] CWE-122 CVE-2025-21250: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21335HIGHCVSS 7.8KEV≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21335 [HIGH] CWE-416 CVE-2025-21335: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
nvd
CVE-2025-21207HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21207 [HIGH] CWE-400 CVE-2025-21207: Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
nvd
CVE-2025-21243HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21243 [HIGH] CWE-190 CVE-2025-21243: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21238HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21238 [HIGH] CWE-122 CVE-2025-21238: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21306HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21306 [HIGH] CWE-122 CVE-2025-21306: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21248HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21248 [HIGH] CWE-122 CVE-2025-21248: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21223HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21223 [HIGH] CWE-122 CVE-2025-21223: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21285HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21285 [HIGH] CWE-476 CVE-2025-21285: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
nvd
CVE-2025-21233HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21233 [HIGH] CWE-122 CVE-2025-21233: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21246HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21246 [HIGH] CWE-122 CVE-2025-21246: Windows Telephony Service Remote Code Execution Vulnerability Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21214MEDIUMCVSS 4.2≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21214 [MEDIUM] CWE-200 CVE-2025-21214: Windows BitLocker Information Disclosure Vulnerability Windows BitLocker Information Disclosure Vulnerability
nvd
CVE-2025-21313MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21313 [MEDIUM] CWE-833 CVE-2025-21313: Windows Security Account Manager (SAM) Denial of Service Vulnerability Windows Security Account Manager (SAM) Denial of Service Vulnerability
nvd
CVE-2025-21317MEDIUMCVSS 5.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21317 [MEDIUM] CWE-532 CVE-2025-21317: Windows Kernel Memory Information Disclosure Vulnerability Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2025-21341MEDIUMCVSS 6.6≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21341 [MEDIUM] CWE-125 CVE-2025-21341: Windows Digital Media Elevation of Privilege Vulnerability Windows Digital Media Elevation of Privilege Vulnerability
nvd