Microsoft Windows 11 24h2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 24h2: 2295 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_11_24h2
CVE-2026-83879
High · 7.0
CWE-362 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83876
High · 7.8
CWE-416 Oct 13, 2026
Windows Shell Elevation of Privilege Vulnerability
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83874
High · 8.8
CWE-122 Oct 13, 2026
Windows Event Tracing Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
CVE-2026-83873
High · 7.8
CWE-23 Oct 13, 2026
Windows Shell Elevation of Privilege Vulnerability
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83872
High · 7.8
CWE-681 Oct 13, 2026
Windows TCP/IP Local Elevation of Privilege Vulnerability
Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVE-2026-83871
High · 7.0
CWE-122 Oct 13, 2026
Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-83870
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Aggregated Data Platform Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
CVE-2026-83869
Critical · 9.8
CWE-191 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83867
High · 7.8
CWE-122 Oct 13, 2026
Windows Push Notifications Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-83866
High · 7.0
CWE-416 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83865
Medium · 4.7
CWE-23 Oct 13, 2026
Windows Internet (wininet.dll) Tampering Vulnerability
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
CVE-2026-83864
Medium · 5.5
CWE-290 Oct 13, 2026
Windows NTFS Information Disclosure Vulnerability
Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-83861
High · 7.8
CWE-122 Oct 13, 2026
Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
CVE-2026-83860
High · 7.5
CWE-121 Oct 13, 2026
Windows GDI Denial of Service Vulnerability
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
CVE-2026-83859
High · 7.8
CWE-416 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83857
High · 7.8
CWE-121 Oct 13, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83856
High · 8.1
CWE-125 Oct 13, 2026
Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-83855
High · 7.5
CWE-191 Oct 13, 2026
Windows WLAN Service Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
CVE-2026-83854
Medium · 5.5
CWE-306 Oct 13, 2026
Windows Notification Information Disclosure Vulnerability
Improper access control in Windows Notification allows an authorized attacker to disclose information locally.
CVE-2026-83853
High · 7.0
CWE-416 Oct 13, 2026
Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-83774
Medium · 4.7
CWE-497 Oct 13, 2026
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-83768
High · 7.8
CWE-122 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83761
High · 7.8
CWE-416 Oct 13, 2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83756
High · 7.8
CWE-416 Oct 13, 2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83642
High · 8.8
CWE-843 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.