microsoft / windows_11_24h2
1,111 known vulnerabilities in microsoft windows_11_24h2.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-50525 | Medium | 0.6% | 7.5 | Allocation of resources without limits or throttling in .NET allows an unauthori… | |
| CVE-2026-47653 | Medium | 0.6% | 8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execu… | |
| CVE-2026-54984 | Medium | 0.6% | 7.8 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a… | |
| CVE-2026-83992 | Medium | 0.6% | 8.8 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a… | |
| CVE-2026-68846 | Medium | 0.6% | 7.1 | Use after free in Windows Kernel allows an authorized attacker to elevate privil… | |
| CVE-2026-69366 | Medium | 0.6% | 7.1 | Use after free in Windows Kernel allows an authorized attacker to elevate privil… | |
| CVE-2026-62819 | Medium | 0.6% | 8.1 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows… | |
| CVE-2026-73016 | Medium | 0.6% | 8.8 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorize… | |
| CVE-2026-50398 | Medium | 0.6% | 8.8 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-50414 | Medium | 0.6% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-58608 | Medium | 0.6% | 8.8 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2024-38246 | Medium | 0.6% | 7.0 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2024-38248 | Medium | 0.6% | 7.0 | Windows Storage Elevation of Privilege Vulnerability | |
| CVE-2026-20864 | Medium | 0.6% | 7.8 | Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows… | |
| CVE-2026-62889 | Medium | 0.6% | 8.1 | Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unautho… | |
| CVE-2026-68834 | Medium | 0.6% | 8.0 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to ele… | |
| CVE-2026-73013 | Medium | 0.6% | 8.8 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a… | |
| CVE-2026-73023 | Medium | 0.6% | 8.8 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a… | |
| CVE-2026-77495 | Medium | 0.6% | 8.8 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a… | |
| CVE-2026-48563 | Medium | 0.6% | 7.5 | Use after free in Remote Desktop Client allows an unauthorized attacker to execu… | |
| CVE-2026-62706 | Medium | 0.5% | 8.8 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized … | |
| CVE-2026-42900 | Medium | 0.5% | 8.1 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-50365 | Medium | 0.5% | 8.0 | Improper authentication in Windows RPC API allows an unauthorized attacker to el… | |
| CVE-2026-50460 | Medium | 0.5% | 8.1 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-62872 | Medium | 0.5% | 8.8 | Incorrect authorization in .NET Framework allows an authorized attacker to eleva… | |
| CVE-2026-42975 | Medium | 0.5% | 8.0 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthoriz… | |
| CVE-2026-69314 | Medium | 0.5% | 7.1 | Use after free in Windows Device Association Broker service allows an authorized… | |
| CVE-2026-44803 | Medium | 0.5% | 7.8 | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized a… | |
| CVE-2026-44812 | Medium | 0.5% | 7.8 | Integer overflow or wraparound in Windows Win32K - GRFX allows an unauthorized a… | |
| CVE-2026-68835 | Medium | 0.5% | 7.1 | Use after free in Windows Print Spooler Components allows an authorized attacker… | |
| CVE-2026-69340 | Medium | 0.5% | 7.1 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev… | |
| CVE-2026-45599 | Medium | 0.5% | 8.1 | Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized atta… | |
| CVE-2026-45635 | Medium | 0.5% | 8.1 | Access of resource using incompatible type ('type confusion') in Universal Plug … | |
| CVE-2026-62781 | Medium | 0.5% | 8.1 | Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to exe… | |
| CVE-2026-69539 | Medium | 0.5% | 7.5 | Use after free in Windows Remote Desktop Services allows an authorized attacker … | |
| CVE-2026-50379 | Medium | 0.5% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-56648 | Medium | 0.5% | 7.5 | Time-of-check time-of-use (toctou) race condition in Windows Network File System… | |
| CVE-2026-58531 | Medium | 0.5% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-20804 | Medium | 0.5% | 7.7 | Incorrect privilege assignment in Windows Hello allows an unauthorized attacker … | |
| CVE-2026-20852 | Medium | 0.5% | 7.7 | Incorrect privilege assignment in Windows Hello allows an unauthorized attacker … | |
| CVE-2026-83997 | Medium | 0.5% | 8.1 | Use after free in Windows Message Queuing allows an unauthorized attacker to exe… | |
| CVE-2026-69777 | Medium | 0.5% | 8.0 | Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker … | |
| CVE-2026-20811 | Medium | 0.5% | 7.8 | Access of resource using incompatible type ('type confusion') in Windows Win32K … | |
| CVE-2026-69847 | Medium | 0.5% | 8.0 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker … | |
| CVE-2026-20832 | Medium | 0.5% | 7.8 | Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of P… | |
| CVE-2026-20857 | Medium | 0.5% | 7.8 | Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows a… | |
| CVE-2026-20859 | Medium | 0.5% | 7.8 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to e… | |
| CVE-2026-20941 | Medium | 0.5% | 7.8 | Improper link resolution before file access ('link following') in Host Process f… | |
| CVE-2026-62735 | Medium | 0.5% | 7.8 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to … | |
| CVE-2026-20870 | Medium | 0.5% | 7.8 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevat… |