Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 24H2

Is your version affected?

CVE Summary Score Published
CVE-2026-96306 Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96307 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-96215 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot… 7.0 High Oct 13, 2026
CVE-2026-96216 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-96217 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-96218 Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally 5.5 Medium Oct 13, 2026
CVE-2026-96219 Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability 9.8 Critical Oct 13, 2026
CVE-2026-96220 Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to… 7.8 High Oct 13, 2026
CVE-2026-96223 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70092 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-70109 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-70110 Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-70147 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a… 9.8 Critical Oct 13, 2026
CVE-2026-70149 Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an… 8.8 High Oct 13, 2026
CVE-2026-70116 Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security… 4.2 Medium Oct 13, 2026
CVE-2026-70013 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network 8.1 High Oct 13, 2026
CVE-2026-70031 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network 7.5 High Oct 13, 2026
CVE-2026-70011 Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70024 Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code… 9.8 Critical Oct 13, 2026
CVE-2026-70038 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network 8.1 High Oct 13, 2026
CVE-2026-70134 Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70044 Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70068 Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate… 8.8 High Oct 13, 2026
CVE-2026-70045 Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70137 Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose… 5.5 Medium Oct 13, 2026

Other Microsoft products