Microsoft Windows 11 Version 24H2 vulnerabilities

Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.

Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.