Windows 11 24h2 Security Vulnerabilities and Issues — Page 5 of Windows 11 24h2 CVE List

Lucene search

MicrosoftWindows 11 24h2

625 matches found

CVE•added 2024/08/13 6:15 p.m.•93 views

CVE-2024-38130

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS9AI score0.05008EPSS

CVE•added 2024/11/12 6:15 p.m.•93 views

CVE-2024-43452

Windows Registry Elevation of Privilege Vulnerability

7.5CVSS7.5AI score0.02205EPSS

CVE•added 2024/12/12 2:4 a.m.•93 views

CVE-2024-49083

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.00293EPSS

CVE•added 2025/01/14 6:15 p.m.•93 views

CVE-2025-21215

Secure Boot Security Feature Bypass Vulnerability

4.6CVSS4.7AI score0.00104EPSS

CVE•added 2025/04/08 6:15 p.m.•93 views

CVE-2025-27487

Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.

8CVSS8.1AI score0.0047EPSS

CVE•added 2025/04/08 6:16 p.m.•93 views

CVE-2025-27491

Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.

7.1CVSS7.9AI score0.01131EPSS

CVE•added 2024/11/12 6:15 p.m.•92 views

CVE-2024-43644

Windows Client-Side Caching Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00211EPSS

CVE•added 2025/01/14 6:15 p.m.•92 views

CVE-2025-21317

Windows Kernel Memory Information Disclosure Vulnerability

5.5CVSS5.3AI score0.00092EPSS

CVE•added 2025/02/11 6:15 p.m.•92 views

CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00141EPSS

CVE•added 2025/04/08 6:15 p.m.•92 views

CVE-2025-27478

Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

7CVSS7.6AI score0.00046EPSS

CVE•added 2025/04/08 6:16 p.m.•92 views

CVE-2025-27727

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

7.8CVSS7.1AI score0.00221EPSS

CVE•added 2024/10/08 6:15 p.m.•91 views

CVE-2024-43500

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

5.5CVSS6.5AI score0.00175EPSS

CVE•added 2024/11/12 6:15 p.m.•91 views

CVE-2024-43626

Windows Telephony Service Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.0036EPSS

CVE•added 2024/12/12 2:4 a.m.•91 views

CVE-2024-49099

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

4.3CVSS4.4AI score0.00149EPSS

CVE•added 2024/12/12 2:4 a.m.•91 views

CVE-2024-49104

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.02689EPSS

CVE•added 2025/01/14 6:15 p.m.•91 views

CVE-2025-21261

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00132EPSS

CVE•added 2025/01/14 6:15 p.m.•91 views

CVE-2025-21285

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.5CVSS7.4AI score0.03034EPSS

CVE•added 2025/01/14 6:16 p.m.•91 views

CVE-2025-21372

Microsoft Brokering File System Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0006EPSS

CVE•added 2025/02/11 6:15 p.m.•91 views

CVE-2025-21375

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

7.8CVSS8.1AI score0.00149EPSS

CVE•added 2025/01/14 6:16 p.m.•91 views

CVE-2025-21409

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS9AI score0.02401EPSS

CVE•added 2024/10/08 6:15 p.m.•90 views

CVE-2024-43513

BitLocker Security Feature Bypass Vulnerability

6.4CVSS7.2AI score0.00292EPSS

CVE•added 2025/02/11 6:15 p.m.•90 views

CVE-2025-21200

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00381EPSS

CVE•added 2025/03/11 5:16 p.m.•90 views

CVE-2025-24061

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.

7.8CVSS7.5AI score0.00148EPSS

CVE•added 2025/04/08 6:15 p.m.•90 views

CVE-2025-26648

Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.

7.8CVSS7.1AI score0.00051EPSS

CVE•added 2024/08/13 6:15 p.m.•89 views

CVE-2024-38122

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

5.5CVSS5.2AI score0.00707EPSS

CVE•added 2024/08/13 6:15 p.m.•89 views

CVE-2024-38141

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00962EPSS

CVE•added 2024/08/13 6:15 p.m.•89 views

CVE-2024-38146

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

7.5CVSS7.5AI score0.27186EPSS

CVE•added 2024/08/13 6:15 p.m.•89 views

CVE-2024-38151

Windows Kernel Information Disclosure Vulnerability

5.5CVSS5.3AI score0.00348EPSS

CVE•added 2024/12/12 2:4 a.m.•89 views

CVE-2024-49127

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00334EPSS

CVE•added 2025/01/14 6:15 p.m.•89 views

CVE-2025-21280

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

5.5CVSS5.5AI score0.00182EPSS

CVE•added 2025/04/08 6:15 p.m.•89 views

CVE-2025-27475

Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally.

7CVSS7.1AI score0.00036EPSS

CVE•added 2024/08/13 6:15 p.m.•88 views

CVE-2024-38114

Windows IP Routing Management Snapin Remote Code Execution Vulnerability

8.8CVSS9AI score0.05878EPSS

CVE•added 2024/09/10 5:15 p.m.•88 views

CVE-2024-38248

Windows Storage Elevation of Privilege Vulnerability

7CVSS8.1AI score0.00334EPSS

CVE•added 2024/11/12 6:15 p.m.•88 views

CVE-2024-43638

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.00259EPSS

CVE•added 2025/03/11 5:16 p.m.•88 views

CVE-2025-21180

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

7.8CVSS8AI score0.00149EPSS

CVE•added 2025/01/14 6:15 p.m.•88 views

CVE-2025-21219

MapUrlToZone Security Feature Bypass Vulnerability

4.3CVSS4.6AI score0.00142EPSS

CVE•added 2025/01/14 6:15 p.m.•88 views

CVE-2025-21229

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00133EPSS

CVE•added 2025/01/14 6:15 p.m.•88 views

CVE-2025-21232

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00133EPSS

CVE•added 2025/04/08 6:16 p.m.•88 views

CVE-2025-29809

Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.

7.1CVSS6.8AI score0.00259EPSS

CVE•added 2024/11/12 6:15 p.m.•87 views

CVE-2024-43624

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

8.8CVSS8.6AI score0.06749EPSS

CVE•added 2024/11/12 6:15 p.m.•87 views

CVE-2024-43642

Windows SMB Denial of Service Vulnerability

7.5CVSS7.5AI score0.16704EPSS

CVE•added 2024/12/12 2:4 a.m.•87 views

CVE-2024-49123

Windows Remote Desktop Services Remote Code Execution Vulnerability

8.1CVSS8.2AI score0.00258EPSS

CVE•added 2025/01/14 6:15 p.m.•87 views

CVE-2025-21328

MapUrlToZone Security Feature Bypass Vulnerability

4.3CVSS4.6AI score0.00096EPSS

CVE•added 2025/02/11 6:15 p.m.•87 views

CVE-2025-21358

Windows Core Messaging Elevation of Privileges Vulnerability

7.8CVSS8AI score0.00159EPSS

CVE•added 2025/02/11 6:15 p.m.•87 views

CVE-2025-21406

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00381EPSS

CVE•added 2025/02/11 6:15 p.m.•87 views

CVE-2025-21407

Windows Telephony Service Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.00381EPSS

CVE•added 2025/04/08 6:15 p.m.•87 views

CVE-2025-24060

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

7.8CVSS7.1AI score0.001EPSS

CVE•added 2025/03/11 5:16 p.m.•87 views

CVE-2025-24084

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.

8.4CVSS7.3AI score0.00267EPSS

CVE•added 2025/04/08 6:15 p.m.•87 views

CVE-2025-27490

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

7.8CVSS7.6AI score0.00066EPSS

CVE•added 2024/09/10 5:15 p.m.•86 views

CVE-2024-38045

Windows TCP/IP Remote Code Execution Vulnerability

8.1CVSS9AI score0.06275EPSS

Total number of security vulnerabilities625