Microsoft Windows 11 Version 24H2 vulnerabilities
3,567 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,567
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL113HIGH2583MEDIUM862LOW9
Vulnerabilities
Page 48 of 179
CVE-2026-85800P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85800 [HIGH] CWE-122 CVE-2026-85800: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85822P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85822 [HIGH] CWE-122 CVE-2026-85822: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85327P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85327 [HIGH] CWE-122 CVE-2026-85327: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85915P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85915 [HIGH] CWE-122 CVE-2026-85915: Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96920P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-96920 [HIGH] CWE-122 CVE-2026-96920: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88168P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-88168 [HIGH] CWE-122 CVE-2026-88168: Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40377P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.84572026-05-12
CVE-2026-40377 [HIGH] CWE-122 CVE-2026-40377: Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88193P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-88193 [HIGH] CWE-122 CVE-2026-88193: Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate pr
Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70278P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70278 [HIGH] CWE-122 CVE-2026-70278: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to el
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69528P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69528 [HIGH] CWE-306 CVE-2026-69528: Missing authentication for critical function in Windows Shell allows an authorized attacker to eleva
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61365P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-61365 [HIGH] CWE-306 CVE-2026-61365: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61356P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-61356 [HIGH] CWE-306 CVE-2026-61356: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61364P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-61364 [HIGH] CWE-306 CVE-2026-61364: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42976P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-42976 [HIGH] CWE-306 CVE-2026-42976: Missing authentication for critical function in Windows RPC API allows an authorized attacker to ele
Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61367P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-61367 [HIGH] CWE-306 CVE-2026-61367: Missing authentication for critical function in Windows Remote Desktop Services allows an authorized
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62777P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-62777 [HIGH] CWE-306 CVE-2026-62777: Missing authentication for critical function in Windows License Manager allows an authorized attacke
Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45638P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.86552026-06-09
CVE-2026-45638 [HIGH] CWE-122 CVE-2026-45638: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87707P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-10-13
CVE-2026-87707 [HIGH] CWE-122 CVE-2026-87707: Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40406P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.84572026-05-12
CVE-2026-40406 [HIGH] CWE-416 CVE-2026-40406: Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a netw
Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-38241P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.17422024-09-10
CVE-2024-38241 [HIGH] CWE-20 CVE-2024-38241: Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
nvd