← Back

Windows 11 24h2

windows_11_24h2

Vendor: Microsoft • 1,718 CVEs

CVEs (1,718)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
1Microsoft
3Windows 11 24h2
Windows 11 25h2Windows 11 26h1
Jul 23, 2026
Jul 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 23, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
1Microsoft
7Windows 10 21h2
Windows 10 22h2Windows 11 24h2+4 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
8.2 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.
1Microsoft
8Windows 10 1809
Windows 10 21h2Windows 10 22h2+5 more
Jul 23, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally.
1Microsoft
6Windows 10 21h2
Windows 10 22h2Windows 11 24h2+3 more
Jul 23, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.
1Microsoft
7Windows 10 21h2
Windows 10 22h2Windows 11 24h2+4 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 20, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 23, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.