microsoft / windows_11_24h2
1,111 known vulnerabilities in microsoft windows_11_24h2.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-50455 | Low | 0.4% | 5.5 | Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an au… | |
| CVE-2026-50690 | Low | 0.4% | 5.5 | Use of uninitialized resource in Windows SMB allows an authorized attacker to di… | |
| CVE-2026-58614 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a s… | |
| CVE-2026-70145 | Low | 0.4% | 5.5 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized at… | |
| CVE-2026-70290 | Low | 0.4% | 5.5 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an author… | |
| CVE-2026-69568 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Storage Spaces Controller allows an authorized att… | |
| CVE-2026-78454 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to dis… | |
| CVE-2026-42968 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Telephony Service allows an authorized attacker to… | |
| CVE-2026-42969 | Low | 0.4% | 5.5 | Use of uninitialized resource in Windows Push Notifications allows an authorized… | |
| CVE-2026-48566 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to … | |
| CVE-2026-59128 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized … | |
| CVE-2026-59137 | Low | 0.4% | 5.5 | Use of uninitialized resource in Windows Event Logging Service allows an authori… | |
| CVE-2026-61347 | Low | 0.4% | 5.5 | Buffer over-read in Windows Event Logging Service allows an authorized attacker … | |
| CVE-2026-61360 | Low | 0.4% | 5.5 | Untrusted pointer dereference in Windows GDI allows an authorized attacker to di… | |
| CVE-2026-61933 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to … | |
| CVE-2026-62703 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to … | |
| CVE-2026-62709 | Low | 0.4% | 5.5 | Use of uninitialized resource in Windows GDI+ allows an authorized attacker to d… | |
| CVE-2026-62730 | Low | 0.4% | 5.5 | Buffer over-read in Windows Wired AutoConfig Service allows an authorized attack… | |
| CVE-2026-62738 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Management Instrumentation allows an authorized at… | |
| CVE-2026-62740 | Low | 0.4% | 5.5 | Use of uninitialized resource in Windows Imaging Component allows an authorized … | |
| CVE-2026-62743 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose i… | |
| CVE-2026-62746 | Low | 0.4% | 5.5 | Buffer over-read in Windows Win32K allows an authorized attacker to disclose inf… | |
| CVE-2026-69286 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an au… | |
| CVE-2026-69318 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to… | |
| CVE-2026-69343 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to di… | |
| CVE-2026-69344 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Print Spooler Components allows an authorized atta… | |
| CVE-2026-69390 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to dis… | |
| CVE-2026-69457 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclo… | |
| CVE-2026-69504 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose inf… | |
| CVE-2026-69527 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized… | |
| CVE-2026-69609 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose i… | |
| CVE-2026-69616 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Remote Desktop Services allows an authorized attac… | |
| CVE-2026-69627 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authori… | |
| CVE-2026-69808 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose i… | |
| CVE-2026-71341 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Partition Management Driver allows an authorized a… | |
| CVE-2026-72980 | Low | 0.4% | 4.4 | Uncontrolled search path element in Windows Hello allows an authorized attacker … | |
| CVE-2026-42915 | Low | 0.4% | 5.5 | Incorrect calculation of buffer size in Windows VMSwitch allows an authorized at… | |
| CVE-2026-45606 | Low | 0.4% | 5.5 | Out-of-bounds read in Microsoft UxTheme Library (uxtheme.dll) allows an authoriz… | |
| CVE-2026-65785 | Low | 0.4% | 6.5 | Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized … | |
| CVE-2026-68831 | Low | 0.4% | 5.5 | Files or directories accessible to external parties in Windows Defender Firewall… | |
| CVE-2026-50475 | Low | 0.4% | 5.5 | Buffer over-read in Windows Kernel allows an authorized attacker to disclose inf… | |
| CVE-2026-61368 | Low | 0.4% | 5.0 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to d… | |
| CVE-2026-57085 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows Print Spooler Components allows an authorized atta… | |
| CVE-2026-59136 | Low | 0.4% | 5.5 | Use of uninitialized resource in Microsoft COM for Windows allows an authorized … | |
| CVE-2026-69832 | Low | 0.4% | 5.6 | Exposure of sensitive system information to an unauthorized control sphere in Wi… | |
| CVE-2026-45634 | Low | 0.4% | 5.5 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to discl… | |
| CVE-2026-68842 | Low | 0.4% | 5.5 | Exposure of sensitive system information to an unauthorized control sphere in Wi… | |
| CVE-2026-49167 | Low | 0.4% | 4.7 | Use after free in Windows Kernel allows an authorized attacker to elevate privil… | |
| CVE-2026-50312 | Low | 0.4% | 4.7 | Use after free in Windows Ancillary Function Driver for WinSock allows an author… | |
| CVE-2026-58545 | Low | 0.4% | 5.5 | Improper access control in Windows Kernel allows an authorized attacker to bypas… |