Windows 11 24h2 Security Vulnerabilities and Issues — Windows 11 24h2 CVE List

Lucene search

MicrosoftWindows 11 24h2

120 matches found

CVE•added 2023/05/09 6:15 p.m.•633 views

CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability

6.7CVSS6.9AI score0.00782EPSS

In wild

CVE•added 2024/08/08 2:15 a.m.•534 views

CVE-2024-21302

Summary:As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this vulnerab...

6.7CVSS5.8AI score0.00705EPSS

CVE•added 2024/11/12 6:15 p.m.•494 views

CVE-2024-38203

Windows Package Library Manager Information Disclosure Vulnerability

6.2CVSS5.8AI score0.00176EPSS

CVE•added 2025/03/11 5:16 p.m.•378 views

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

6.5CVSS7.3AI score0.51253EPSS

CVE•added 2024/11/12 6:15 p.m.•353 views

CVE-2024-43451

NTLM Hash Disclosure Spoofing Vulnerability

6.5CVSS6.5AI score0.89638EPSS

In wild

CVE•added 2025/03/11 5:16 p.m.•281 views

CVE-2025-24054

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

6.5CVSS6.5AI score0.31507EPSS

In wildWeb

CVE•added 2024/10/08 6:15 p.m.•241 views

CVE-2024-37976

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

6.7CVSS7.3AI score0.0035EPSS

CVE•added 2025/01/14 6:15 p.m.•174 views

CVE-2025-21263

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00149EPSS

CVE•added 2024/12/12 2:4 a.m.•161 views

CVE-2024-49082

Windows File Explorer Information Disclosure Vulnerability

6.8CVSS6.4AI score0.00161EPSS

CVE•added 2025/01/14 6:15 p.m.•161 views

CVE-2025-21341

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00149EPSS

CVE•added 2025/01/14 6:15 p.m.•155 views

CVE-2025-21327

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00149EPSS

CVE•added 2025/01/14 6:15 p.m.•131 views

CVE-2025-21310

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00151EPSS

CVE•added 2025/01/14 6:15 p.m.•130 views

CVE-2025-21260

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00151EPSS

CVE•added 2025/01/14 6:15 p.m.•129 views

CVE-2025-21211

Secure Boot Security Feature Bypass Vulnerability

6.8CVSS6.6AI score0.00178EPSS

CVE•added 2024/10/08 6:15 p.m.•126 views

CVE-2024-43561

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5CVSS7.3AI score0.00287EPSS

CVE•added 2025/02/11 6:15 p.m.•122 views

CVE-2025-21377

NTLM Hash Disclosure Spoofing Vulnerability

6.5CVSS7.4AI score0.05088EPSS

CVE•added 2024/12/12 2:4 a.m.•120 views

CVE-2024-49077

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

6.8CVSS6.6AI score0.00449EPSS

CVE•added 2024/10/08 6:15 p.m.•118 views

CVE-2024-43559

Windows Mobile Broadband Driver Denial of Service Vulnerability

6.5CVSS7.3AI score0.00541EPSS

CVE•added 2024/11/12 6:15 p.m.•112 views

CVE-2024-43634

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.00328EPSS

CVE•added 2024/12/12 2:4 a.m.•112 views

CVE-2024-49109

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00296EPSS

CVE•added 2024/12/12 2:4 a.m.•109 views

CVE-2024-49094

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00296EPSS

CVE•added 2024/11/12 6:15 p.m.•108 views

CVE-2024-43637

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.00328EPSS

CVE•added 2024/08/13 6:15 p.m.•106 views

CVE-2024-38223

Windows Initial Machine Configuration Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.0037EPSS

CVE•added 2025/04/08 6:15 p.m.•103 views

CVE-2025-26651

Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.

6.5CVSS7.1AI score0.154EPSS

CVE•added 2025/01/14 6:15 p.m.•100 views

CVE-2025-21226

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00151EPSS

CVE•added 2025/02/11 6:15 p.m.•99 views

CVE-2025-21349

Windows Remote Desktop Configuration Service Tampering Vulnerability

6.8CVSS7.5AI score0.00091EPSS

CVE•added 2025/02/11 6:15 p.m.•97 views

CVE-2025-21254

Internet Connection Sharing (ICS) Denial of Service Vulnerability

6.5CVSS7.3AI score0.00134EPSS

CVE•added 2025/01/14 6:15 p.m.•97 views

CVE-2025-21324

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00151EPSS

CVE•added 2025/01/14 6:15 p.m.•96 views

CVE-2025-21308

Windows Themes Spoofing Vulnerability

6.5CVSS6.5AI score0.00557EPSS

CVE•added 2024/12/12 2:4 a.m.•95 views

CVE-2024-49083

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.00378EPSS

CVE•added 2025/01/14 6:15 p.m.•95 views

CVE-2025-21255

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00151EPSS

CVE•added 2024/10/08 6:15 p.m.•92 views

CVE-2024-43513

BitLocker Security Feature Bypass Vulnerability

6.4CVSS7.2AI score0.00352EPSS

CVE•added 2025/01/14 6:15 p.m.•92 views

CVE-2025-21261

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00149EPSS

CVE•added 2024/11/12 6:15 p.m.•90 views

CVE-2024-43638

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.00328EPSS

CVE•added 2025/01/14 6:15 p.m.•90 views

CVE-2025-21232

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00151EPSS

CVE•added 2024/09/10 5:15 p.m.•89 views

CVE-2024-38254

Windows Authentication Information Disclosure Vulnerability

6.2CVSS7AI score0.00227EPSS

CVE•added 2025/01/14 6:15 p.m.•89 views

CVE-2025-21229

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00151EPSS

CVE•added 2024/12/12 2:4 a.m.•88 views

CVE-2024-49092

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

6.8CVSS6.6AI score0.00293EPSS

CVE•added 2025/02/11 6:15 p.m.•87 views

CVE-2025-21216

Internet Connection Sharing (ICS) Denial of Service Vulnerability

6.5CVSS7.3AI score0.00134EPSS

CVE•added 2025/04/08 6:15 p.m.•87 views

CVE-2025-26672

Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

6.5CVSS6.8AI score0.0005EPSS

CVE•added 2024/08/13 6:15 p.m.•85 views

CVE-2024-38161

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

6.8CVSS6.9AI score0.00647EPSS

CVE•added 2025/03/11 5:16 p.m.•85 views

CVE-2025-24996

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

6.5CVSS6.9AI score0.00209EPSS

CVE•added 2024/11/12 6:15 p.m.•84 views

CVE-2024-43449

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

6.8CVSS6.7AI score0.00328EPSS

CVE•added 2025/03/11 5:16 p.m.•84 views

CVE-2025-24988

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

6.8CVSS6.2AI score0.00139EPSS

CVE•added 2025/02/11 6:15 p.m.•83 views

CVE-2025-21212

Internet Connection Sharing (ICS) Denial of Service Vulnerability

6.5CVSS7.3AI score0.00134EPSS

CVE•added 2025/01/14 6:15 p.m.•83 views

CVE-2025-21228

Windows Digital Media Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00151EPSS

CVE•added 2024/12/12 2:4 a.m.•82 views

CVE-2024-49101

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

6.6CVSS6.5AI score0.00296EPSS

CVE•added 2025/04/08 6:15 p.m.•82 views

CVE-2025-21197

Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.

6.5CVSS6.7AI score0.00103EPSS

CVE•added 2025/04/08 6:15 p.m.•82 views

CVE-2025-26637

Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

6.8CVSS6.9AI score0.00098EPSS

CVE•added 2025/04/08 6:16 p.m.•82 views

CVE-2025-27738

Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.

6.5CVSS6.7AI score0.00103EPSS

Total number of security vulnerabilities120