microsoft / windows_11_24h2
1,111 known vulnerabilities in microsoft windows_11_24h2.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-45604 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows Application Identity (AppID) Subsystem allows an a… | |
| CVE-2026-83991 | Low | 0.3% | 5.5 | Missing authentication for critical function in Windows Cloud Files Mini Filter … | |
| CVE-2026-69294 | Low | 0.3% | 5.5 | Generation of error message containing sensitive information in Microsoft COM fo… | |
| CVE-2026-55000 | Low | 0.3% | 6.4 | Use after free in Windows USB Print Driver allows an unauthorized attacker to el… | |
| CVE-2026-45608 | Low | 0.3% | 6.8 | Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to dis… | |
| CVE-2026-59130 | Low | 0.3% | 5.6 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose infor… | |
| CVE-2026-50302 | Low | 0.3% | 4.2 | Improper certificate validation in Windows Cryptographic Services allows an unau… | |
| CVE-2026-62769 | Low | 0.3% | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate… | |
| CVE-2026-62881 | Low | 0.3% | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate… | |
| CVE-2026-71339 | Low | 0.3% | 6.7 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to… | |
| CVE-2026-59135 | Low | 0.3% | 5.5 | Weak authentication in Microsoft Windows Search Component allows an authorized a… | |
| CVE-2026-45642 | Low | 0.3% | 3.9 | Improper input validation in Microsoft Azure Attestation service and Device Heal… | |
| CVE-2026-62708 | Low | 0.3% | 6.4 | Use after free in Windows Kernel allows an unauthorized attacker to elevate priv… | |
| CVE-2026-70304 | Low | 0.3% | 6.7 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to eleva… | |
| CVE-2026-70330 | Low | 0.3% | 6.7 | Heap-based buffer overflow in Windows DNS allows an authorized attacker to eleva… | |
| CVE-2026-62786 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose i… | |
| CVE-2026-62793 | Low | 0.3% | 5.5 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose infor… | |
| CVE-2026-62796 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose inf… | |
| CVE-2026-62798 | Low | 0.3% | 5.5 | Untrusted pointer dereference in Windows Win32K allows an authorized attacker to… | |
| CVE-2026-65662 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows GDI allows an authorized attacker to disclose info… | |
| CVE-2026-50310 | Low | 0.3% | 4.7 | Integer overflow or wraparound in Windows Devices Human Interface allows an auth… | |
| CVE-2026-69554 | Low | 0.3% | 5.5 | Missing authentication for critical function in Microsoft Windows Search Compone… | |
| CVE-2026-68833 | Low | 0.3% | 6.8 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex… | |
| CVE-2026-71329 | Low | 0.3% | 6.8 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex… | |
| CVE-2026-72999 | Low | 0.3% | 6.8 | Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to … | |
| CVE-2026-77892 | Low | 0.3% | 6.8 | No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to… | |
| CVE-2026-83501 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows… | |
| CVE-2026-50295 | Low | 0.3% | 5.5 | Improper privilege management in Microsoft Windows DNS allows an authorized atta… | |
| CVE-2026-50495 | Low | 0.3% | 6.1 | Improper access control in Microsoft Windows DNS allows an authorized attacker t… | |
| CVE-2026-65784 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose inf… | |
| CVE-2026-69288 | Low | 0.3% | 5.5 | Use of uninitialized resource in Windows GDI+ allows an authorized attacker to d… | |
| CVE-2026-62887 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose inf… | |
| CVE-2026-68851 | Low | 0.3% | 5.5 | Buffer over-read in Windows NTFS allows an authorized attacker to disclose infor… | |
| CVE-2026-69316 | Low | 0.3% | 4.7 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disc… | |
| CVE-2026-69853 | Low | 0.3% | 4.7 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to… | |
| CVE-2026-69895 | Low | 0.3% | 4.7 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to dis… | |
| CVE-2026-50375 | Low | 0.3% | 6.3 | Heap-based buffer overflow in Windows DirectX allows an authorized attacker to e… | |
| CVE-2026-77491 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose in… | |
| CVE-2026-32220 | Low | 0.3% | 4.4 | Improper access control in Windows Virtualization-Based Security (VBS) Enclave a… | |
| CVE-2026-65777 | Low | 0.3% | 5.3 | Inadequate encryption strength in Windows Active Directory allows an authorized … | |
| CVE-2026-59131 | Low | 0.3% | 5.6 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose infor… | |
| CVE-2026-61936 | Low | 0.3% | 5.5 | Missing authorization in Windows Defender Firewall Service allows an authorized … | |
| CVE-2026-72966 | Low | 0.3% | 5.5 | Missing authorization in Windows Remote Access Connection Manager allows an auth… | |
| CVE-2026-68830 | Low | 0.3% | 5.5 | Improper link resolution before file access ('link following') in Windows Univer… | |
| CVE-2026-34346 | Low | 0.3% | 5.5 | Cleartext transmission of sensitive information in Windows Ancillary Function Dr… | |
| CVE-2026-49174 | Low | 0.3% | 6.1 | Missing authentication for critical function in Microsoft Windows DNS allows an … | |
| CVE-2026-50303 | Low | 0.3% | 5.5 | Use of a cryptographic primitive with a risky implementation in Windows Key Guar… | |
| CVE-2026-69425 | Low | 0.3% | 4.7 | Improper link resolution before file access ('link following') in Windows NTFS a… | |
| CVE-2026-50418 | Low | 0.3% | 5.1 | Improper access control in Windows System allows an unauthorized attacker to byp… | |
| CVE-2026-62883 | Low | 0.3% | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate… |