Microsoft Windows 11 Version 24H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 Version 24H2: 2879 record(s), with affected versions and fixes.
CVE-2026-68884
High · 7.0
CWE-122 Sep 8, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-68881
Medium · 5.5
CWE-125 Sep 8, 2026
Microsoft Standard XPS Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.
CVE-2026-68880
High · 8.0
CWE-122 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-68878
High · 8.0
CWE-121 Sep 8, 2026
Windows Fast FAT Driver Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-68877
High · 7.8
CWE-122 Sep 8, 2026
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVE-2026-68876
High · 8.0
CWE-122 Sep 8, 2026
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-68875
High · 7.8
CWE-126 Sep 8, 2026
Windows NTFS Remote Code Execution Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-68874
Medium · 5.7
CWE-125 Sep 8, 2026
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network.
CVE-2026-68873
Medium · 5.5
CWE-532 Sep 8, 2026
Windows Program Compatibility Assistant Service Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
CVE-2026-68852
Medium · 5.5
CWE-200 Sep 8, 2026
Microsoft Account Information Disclosure Vulnerability
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
CVE-2026-68851
Medium · 5.5
CWE-126 Sep 8, 2026
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-68850
High · 7.8
CWE-122 Sep 8, 2026
Microsoft Account Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
CVE-2026-68849
Medium · 4.7
CWE-125 Sep 8, 2026
Windows Bluetooth Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally.
CVE-2026-68848
High · 7.8
CWE-122 Sep 8, 2026
Windows Print Spooler Components Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
CVE-2026-68847
High · 7.0
CWE-416 Sep 8, 2026
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
CVE-2026-68846
High · 7.1
CWE-416 Sep 8, 2026
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network.
CVE-2026-68845
High · 7.8
CWE-122 Sep 8, 2026
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-68844
High · 7.8
CWE-122 Sep 8, 2026
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
CVE-2026-68843
Medium · 5.5
CWE-416 Sep 8, 2026
Microsoft Office Word Information Disclosure Vulnerability
Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally.
CVE-2026-68842
Medium · 5.5
CWE-497 Sep 8, 2026
Windows MIDI Service Module Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
CVE-2026-68841
High · 7.8
CWE-122 Sep 8, 2026
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-68840
High · 7.0
CWE-362 Sep 8, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-68839
Critical · 9.8
CWE-20 Sep 8, 2026
Windows USB Mass Storage Class Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-68838
High · 8.0
CWE-121 Sep 8, 2026
Windows NTFS Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-68837
High · 7.0
CWE-416 Sep 8, 2026
Windows File History Service Elevation of Privilege Vulnerability
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally.