Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 24H2

Is your version affected?

CVE Summary Score Published
CVE-2026-108461 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-69639 Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-108462 Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized… 5.5 Medium Oct 13, 2026
CVE-2026-108464 Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-108465 Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-108466 Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network 5.3 Medium Oct 13, 2026
CVE-2026-69898 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-72968 Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges… 7.0 High Oct 13, 2026
CVE-2026-70566 Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-105733 Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally 8.8 High Oct 13, 2026
CVE-2026-108467 Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a… 8.8 High Oct 13, 2026
CVE-2026-105722 Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-105723 Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate… 7.5 High Oct 13, 2026
CVE-2026-108399 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally 7.2 High Oct 13, 2026
CVE-2026-70235 Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally 5.5 Medium Oct 13, 2026
CVE-2026-108458 Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-97800 Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to… 7.8 High Oct 13, 2026
CVE-2026-96183 Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized… 5.5 Medium Oct 13, 2026
CVE-2026-102227 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-108468 Use after free in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83498 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to… 7.8 High Sep 8, 2026
CVE-2026-83501 Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose… 5.5 Medium Sep 8, 2026
CVE-2026-84000 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally 7.8 High Sep 8, 2026
CVE-2026-83995 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-83997 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026

Other Microsoft products