microsoft / windows_11_24h2
1,111 known vulnerabilities in microsoft windows_11_24h2.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-61348 | Medium | 1.6% | 7.0 | Use after free in Windows Ancillary Function Driver for WinSock allows an author… | |
| CVE-2026-20875 | Medium | 1.6% | 7.5 | Null pointer dereference in Windows Local Security Authority Subsystem Service (… | |
| CVE-2026-62766 | Medium | 1.5% | 7.0 | Double free in Windows Kerberos allows an authorized attacker to elevate privile… | |
| CVE-2024-38240 | Medium | 1.5% | 8.1 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | |
| CVE-2024-38045 | Medium | 1.4% | 8.1 | Windows TCP/IP Remote Code Execution Vulnerability | |
| CVE-2026-20868 | Medium | 1.4% | 8.8 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) a… | |
| CVE-2026-20846 | Medium | 1.4% | 7.5 | Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service… | |
| CVE-2024-21416 | Medium | 1.4% | 8.1 | Windows TCP/IP Remote Code Execution Vulnerability | |
| CVE-2026-42985 | Medium | 1.3% | 8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execu… | |
| CVE-2026-50330 | Medium | 1.3% | 7.5 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac… | |
| CVE-2026-33096 | Medium | 1.2% | 7.5 | Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to deny s… | |
| CVE-2026-62815 | Medium | 1.2% | 9.8 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code… | |
| CVE-2026-69587 | Medium | 1.2% | 7.5 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacke… | |
| CVE-2026-69588 | Medium | 1.2% | 7.5 | Missing release of memory after effective lifetime in Windows TCP/IP allows an u… | |
| CVE-2026-32225 | Medium | 1.2% | 8.8 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to… | |
| CVE-2026-20921 | Medium | 1.2% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-69881 | Medium | 1.2% | 7.5 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacke… | |
| CVE-2026-40378 | Medium | 1.2% | 7.5 | Memory allocation with excessive size value in Windows Local Security Authority … | |
| CVE-2026-49787 | Medium | 1.2% | 7.5 | Allocation of resources without limits or throttling in Windows HTTP.sys allows … | |
| CVE-2026-49788 | Medium | 1.2% | 7.5 | Allocation of resources without limits or throttling in HTTP/2 allows an unautho… | |
| CVE-2026-50355 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50368 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50411 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allo… | |
| CVE-2026-50424 | Medium | 1.2% | 7.5 | Untrusted pointer dereference in Windows Domain Controller allows an unauthorize… | |
| CVE-2026-50496 | Medium | 1.2% | 7.5 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized … | |
| CVE-2026-50647 | Medium | 1.2% | 7.5 | Loop with unreachable exit condition ('infinite loop') in Active Directory Feder… | |
| CVE-2026-50653 | Medium | 1.2% | 7.5 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory… | |
| CVE-2026-50695 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50696 | Medium | 1.2% | 7.5 | Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allow… | |
| CVE-2026-54119 | Medium | 1.2% | 7.5 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directo… | |
| CVE-2026-20856 | Medium | 1.1% | 8.1 | Improper input validation in Windows Server Update Service allows an unauthorize… | |
| CVE-2026-54113 | Medium | 1.1% | 7.5 | Allocation of resources without limits or throttling in Windows Kernel allows an… | |
| CVE-2026-69428 | Medium | 1.1% | 7.5 | Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allow… | |
| CVE-2026-56186 | Medium | 1.1% | 8.1 | Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose… | |
| CVE-2026-20854 | Medium | 1.1% | 7.5 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) all… | |
| CVE-2026-20922 | Medium | 1.1% | 7.8 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to exec… | |
| CVE-2026-44815 | Medium | 1.1% | 9.8 | Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attack… | |
| CVE-2026-50429 | Medium | 1.1% | 8.2 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose… | |
| CVE-2026-69525 | Medium | 1.0% | 9.8 | Use after free in Windows Remote Desktop Services allows an unauthorized attacke… | |
| CVE-2026-69829 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to e… | |
| CVE-2026-47302 | Medium | 1.0% | 7.5 | Allocation of resources without limits or throttling in .NET allows an unauthori… | |
| CVE-2026-48573 | Medium | 1.0% | 7.9 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to by… | |
| CVE-2026-48576 | Medium | 1.0% | 7.9 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to by… | |
| CVE-2026-50463 | Medium | 1.0% | 7.5 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose… | |
| CVE-2026-50470 | Medium | 1.0% | 7.5 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized … | |
| CVE-2026-20849 | Medium | 1.0% | 7.5 | Reliance on untrusted inputs in a security decision in Windows Kerberos allows a… | |
| CVE-2026-69496 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized a… | |
| CVE-2026-42990 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized atta… | |
| CVE-2026-49172 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacke… | |
| CVE-2026-50447 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized att… |