Microsoft Windows 11 Version 24H2 vulnerabilities
3,562 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,562
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL113HIGH2579MEDIUM861LOW9
Vulnerabilities
Page 56 of 179
CVE-2026-83859P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83859 [HIGH] CWE-416 CVE-2026-83859: Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83677P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83677 [HIGH] CWE-401 CVE-2026-83677: Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized att
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-49167P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-49167 [HIGH] CWE-416 CVE-2026-49167: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-35417P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.84572026-05-12
CVE-2026-35417 [HIGH] CWE-843 CVE-2026-35417: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85906P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-85906 [HIGH] CWE-416 CVE-2026-85906: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83922P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83922 [HIGH] CWE-416 CVE-2026-83922: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62697P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-62697 [HIGH] CWE-416 CVE-2026-62697: Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges loc
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69407P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69407 [HIGH] CWE-190 CVE-2026-69407: Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate pri
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69270P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69270 [HIGH] CWE-20 CVE-2026-69270: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69307P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69307 [HIGH] CWE-122 CVE-2026-69307: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69571P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69571 [HIGH] CWE-122 CVE-2026-69571: Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized att
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65775P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-65775 [HIGH] CWE-416 CVE-2026-65775: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62779P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-62779 [HIGH] CWE-416 CVE-2026-62779: Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62707P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-62707 [HIGH] CWE-416 CVE-2026-62707: Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate pr
Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62711P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-62711 [HIGH] CWE-416 CVE-2026-62711: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50436P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-50436 [HIGH] CWE-416 CVE-2026-50436: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-54114P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-54114 [HIGH] CWE-416 CVE-2026-54114: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50478P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-50478 [HIGH] CWE-416 CVE-2026-50478: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50326P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-50326 [HIGH] CWE-416 CVE-2026-50326: Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges
Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50329P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14
CVE-2026-50329 [HIGH] CWE-416 CVE-2026-50329: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd