Microsoft Windows 11 Version 24H2 vulnerabilities
3,562 known vulnerabilities affecting microsoft/windows_11_version_24h2.
Total CVEs
3,562
CISA KEV
48
actively exploited
Public exploits
32
Exploited in wild
56
Severity breakdown
CRITICAL113HIGH2579MEDIUM861LOW9
Vulnerabilities
Page 97 of 179
CVE-2026-83708P3HIGHCVSS 7.0≥ 10.0.26100.0, < 10.0.26100.97112026-10-13
CVE-2026-83708 [HIGH] CWE-121 CVE-2026-83708: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70578P3HIGHCVSS 7.0≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-70578 [HIGH] CWE-122 CVE-2026-70578: Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate priv
Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69468P3HIGHCVSS 7.0≥ 10.0.26100.0, < 10.0.26100.94452026-09-08
CVE-2026-69468 [HIGH] CWE-122 CVE-2026-69468: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50472P3HIGHCVSS 7.0≥ 10.0.26100.0, < 10.0.26100.91682026-08-11
CVE-2026-50472 [HIGH] CWE-122 CVE-2026-50472: Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges loca
Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-27473P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-27473 [HIGH] CWE-400 CVE-2025-27473: Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny servic
Uncontrolled resource consumption in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.
nvd
CVE-2024-43625P3HIGHCVSS 8.1≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43625 [HIGH] CWE-416 CVE-2024-43625: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
nvd
CVE-2024-49076P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49076 [HIGH] CWE-287 CVE-2024-49076: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
nvd
CVE-2024-49079P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49079 [HIGH] CWE-416 CVE-2024-49079: Input Method Editor (IME) Remote Code Execution Vulnerability
Input Method Editor (IME) Remote Code Execution Vulnerability
nvd
CVE-2024-38249P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.17422024-09-10
CVE-2024-38249 [HIGH] CWE-416 CVE-2024-38249: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2025-21373P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21373 [HIGH] CWE-59 CVE-2025-21373: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2025-53805P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.65842025-09-09
CVE-2025-53805 [HIGH] CWE-125 CVE-2025-53805: Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny
Out-of-bounds read in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.
nvd
CVE-2025-21358P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21358 [HIGH] CWE-822 CVE-2025-21358: Windows Core Messaging Elevation of Privileges Vulnerability
Windows Core Messaging Elevation of Privileges Vulnerability
nvd
CVE-2024-43626P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43626 [HIGH] CWE-122 CVE-2024-43626: Windows Telephony Service Elevation of Privilege Vulnerability
Windows Telephony Service Elevation of Privilege Vulnerability
nvd
CVE-2024-43556P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.20332024-10-08
CVE-2024-43556 [HIGH] CWE-416 CVE-2024-43556: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2025-49689P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.46522025-07-08
CVE-2025-49689 [HIGH] CWE-125 CVE-2025-49689: Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevat
Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2024-38247P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.17422024-09-10
CVE-2024-38247 [HIGH] CWE-415 CVE-2024-38247: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2024-38135P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.14572024-08-13
CVE-2024-38135 [HIGH] CWE-126 CVE-2024-38135: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
nvd
CVE-2025-21367P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21367 [HIGH] CWE-416 CVE-2025-21367: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
nvd
CVE-2025-27739P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-27739 [HIGH] CWE-822 CVE-2025-27739: Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-21343P3HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21343 [HIGH] CWE-269 CVE-2025-21343: Windows Web Threat Defense User Service Information Disclosure Vulnerability
Windows Web Threat Defense User Service Information Disclosure Vulnerability
nvd