Microsoft Windows 11 Version 24H2 vulnerabilities
3,562 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,562
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL113HIGH2579MEDIUM861LOW9
Vulnerabilities
Page 55 of 179
CVE-2026-85884P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85884 [HIGH] CWE-306 CVE-2026-85884: Missing authentication for critical function in Windows Health and Optimized Experiences Service all
Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83769P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83769 [HIGH] CWE-416 CVE-2026-83769: Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70151P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70151 [HIGH] CWE-416 CVE-2026-70151: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83732P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83732 [HIGH] CWE-416 CVE-2026-83732: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49791P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-49791 [HIGH] CWE-59 CVE-2026-49791: Improper link resolution before file access ('link following') in Windows Routing and Remote Access
Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83913P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83913 [HIGH] CWE-416 CVE-2026-83913: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83876P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83876 [HIGH] CWE-416 CVE-2026-83876: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70023P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70023 [HIGH] CWE-416 CVE-2026-70023: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83883P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83883 [HIGH] CWE-416 CVE-2026-83883: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83690P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83690 [HIGH] CWE-416 CVE-2026-83690: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87716P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-87716 [HIGH] CWE-122 CVE-2026-87716: Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to d
Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-85945P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85945 [HIGH] CWE-416 CVE-2026-85945: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83700P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83700 [HIGH] CWE-416 CVE-2026-83700: Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privi
Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88134P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-88134 [HIGH] CWE-416 CVE-2026-88134: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83712P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83712 [HIGH] CWE-787 CVE-2026-83712: Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-70218P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-70218 [HIGH] CWE-285 CVE-2026-70218: Insufficient granularity of access control in Windows StateRepository API allows an authorized attac
Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83796P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83796 [HIGH] CWE-416 CVE-2026-83796: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83762P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83762 [HIGH] CWE-416 CVE-2026-83762: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87694P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-87694 [HIGH] CWE-416 CVE-2026-87694: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83721P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83721 [HIGH] CWE-416 CVE-2026-83721: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd