← Back

Windows 11 24h2

windows_11_24h2

Vendor: Microsoft • 1,339 CVEs

CVEs (1,339)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
8Windows 10 21h2
Windows 10 22h2Windows 11 22h2+5 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Sep 12, 2025
Sep 9, 2025
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to execute code locally.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Sep 12, 2025
Sep 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Sep 12, 2025
Sep 9, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Graphics Kernel allows an authorized attacker to elevate privileges locally.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Sep 12, 2025
Sep 9, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper authentication in Windows NTLM allows an authorized attacker to elevate privileges over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Access of resource using incompatible type ('type confusion') in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows UI XAML Maps MapControlSettings allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Sep 15, 2025
Sep 9, 2025
N/A· v4
7.3 HIGH· v3
N/A· v2
Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Integer overflow or wraparound in Windows SPNEGO Extended Negotiation allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Oct 2, 2025
Sep 9, 2025
N/A· v4
7.3 HIGH· v3
N/A· v2
Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Nov 11, 2025
Sep 9, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
1Microsoft
10Windows 10 1607
Windows 10 21h2Windows 10 22h2+7 more
Nov 21, 2025
Sep 9, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Oct 1, 2025
Sep 9, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Microsoft Virtual Hard Drive allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Oct 1, 2025
Sep 9, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Oct 1, 2025
Sep 9, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.