Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 24H2

Is your version affected?

CVE Summary Score Published
CVE-2026-83504 Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose… 4.7 Medium Oct 13, 2026
CVE-2026-81964 Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a… 5.5 Medium Oct 13, 2026
CVE-2026-69387 Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-69721 Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-69644 Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized… 5.5 Medium Oct 13, 2026
CVE-2026-69883 Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-69354 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-72934 Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges… 7.0 High Oct 13, 2026
CVE-2026-72955 Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70580 Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform… 8.8 High Oct 13, 2026
CVE-2026-69634 Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-69705 Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-68836 Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-69521 Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-70255 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70252 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70278 Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges… 7.8 High Oct 13, 2026
CVE-2026-70271 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70280 Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally 4.4 Medium Oct 13, 2026
CVE-2026-70272 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70273 Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-70274 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70284 Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-70285 Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-70218 Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate… 7.8 High Oct 13, 2026

Other Microsoft products