Skip to content

Vulnerabilities of Microsoft Windows 11 Version 24H2

Is your version affected?

CVE Summary Score Published
CVE-2026-69715 Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69586 Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69493 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-68839 Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over… 9.8 Critical Sep 8, 2026
CVE-2026-77493 Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69579 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72982 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72983 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a… 9.8 Critical Sep 8, 2026
CVE-2026-69819 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69525 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69496 Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69463 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69431 Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-69491 Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a… 9.8 Critical Sep 8, 2026
CVE-2026-69408 Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code… 9.8 Critical Sep 8, 2026
CVE-2026-69276 Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to… 9.8 Critical Sep 8, 2026
CVE-2026-62815 Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network 9.8 Critical Aug 11, 2026
CVE-2026-57092 Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network 9.9 Critical Jul 14, 2026
CVE-2026-56188 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network… 9.8 Critical Jul 14, 2026
CVE-2026-56190 Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network 9.8 Critical Jul 14, 2026
CVE-2026-50447 Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability 9.8 Critical Jul 14, 2026
CVE-2026-50380 Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network 9.6 Critical Jul 14, 2026
CVE-2026-49798 Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally 9.3 Critical Jul 14, 2026
CVE-2026-54990 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 9.8 Critical Jul 14, 2026
CVE-2026-49172 Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network 9.8 Critical Jul 14, 2026

Other Microsoft products