Microsoft Windows 11 24h2 vulnerabilities

Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.

Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.

Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.