Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 24H2

Is your version affected?

CVE Summary Score Published
CVE-2026-87707 Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-87716 Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a… 7.5 High Oct 13, 2026
CVE-2026-88070 Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-88071 Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85930 Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-85931 Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a… 8.8 High Oct 13, 2026
CVE-2026-85933 Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85945 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85934 Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-85935 Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-87691 Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-85936 Double free in Windows Shell allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-85938 Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-85928 Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code… 9.8 Critical Oct 13, 2026
CVE-2026-85939 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network 5.3 Medium Oct 13, 2026
CVE-2026-70277 Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-70270 Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate… 5.5 Medium Oct 13, 2026
CVE-2026-70303 Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83710 Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83888 Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network 6.5 Medium Oct 13, 2026
CVE-2026-85329 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account… 7.0 High Oct 13, 2026
CVE-2026-85914 Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-85916 Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized… 6.2 Medium Oct 13, 2026
CVE-2026-85904 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device… 7.0 High Oct 13, 2026
CVE-2026-85867 Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate… 7.8 High Oct 13, 2026

Other Microsoft products