Microsoft Windows 11 Version 24H2 vulnerabilities

3,562 known vulnerabilities affecting microsoft/windows_11_version_24h2.

Total CVEs

3,562

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL113HIGH2579MEDIUM861LOW9

Vulnerabilities

SortPage 65 of 179

CVE-2026-73014P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08

CVE-2026-73014 [HIGH] CWE-862 CVE-2026-73014: Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privil Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83942P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94452026-09-08

CVE-2026-83942 [HIGH] CWE-862 CVE-2026-83942: Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally. Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-61925P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.91682026-08-11

CVE-2026-61925 [HIGH] CWE-863 CVE-2026-61925: Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges loc Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-62721P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.94572026-08-11

CVE-2026-62721 [HIGH] CWE-1220 CVE-2026-62721: Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized at Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50344P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14

CVE-2026-50344 [HIGH] CWE-285 CVE-2026-50344: Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally. Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50311P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14

CVE-2026-50311 [HIGH] CWE-284 CVE-2026-50311: Improper access control in Windows Server allows an authorized attacker to elevate privileges locall Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-58540P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14

CVE-2026-58540 [HIGH] CWE-285 CVE-2026-58540: Improper authorization in Windows Installer allows an authorized attacker to elevate privileges loca Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50405P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14

CVE-2026-50405 [HIGH] CWE-1220 CVE-2026-50405: Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-40408P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.84572026-05-12

CVE-2026-40408 [HIGH] CWE-416 CVE-2026-40408: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-27915P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.82462026-04-14

CVE-2026-27915 [HIGH] CWE-416 CVE-2026-27915: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26162P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.82462026-04-14

CVE-2026-26162 [HIGH] CWE-843 CVE-2026-26162: Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized at Access of resource using incompatible type ('type confusion') in Windows OLE allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26163P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.82462026-04-14

CVE-2026-26163 [HIGH] CWE-415 CVE-2026-26163: Double free in Windows Kernel allows an authorized attacker to elevate privileges locally. Double free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83515P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.97112026-10-13

CVE-2026-83515 [HIGH] CWE-908 CVE-2026-83515: Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.

nvd

CVE-2026-85376P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13

CVE-2026-85376 [HIGH] CWE-1390 CVE-2026-85376: Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate pri Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85872P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.97112026-10-13

CVE-2026-85872 [HIGH] CWE-416 CVE-2026-85872: Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges loc Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50358P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14

CVE-2026-50358 [HIGH] CWE-416 CVE-2026-50358: Use after free in Windows Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50393P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14

CVE-2026-50393 [HIGH] CWE-416 CVE-2026-50393: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50476P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14

CVE-2026-50476 [HIGH] CWE-416 CVE-2026-50476: Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally. Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50396P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14

CVE-2026-50396 [HIGH] CWE-416 CVE-2026-50396: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-57093P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.88752026-07-14

CVE-2026-57093 [HIGH] CWE-416 CVE-2026-57093: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

← Previous65 / 179Next →