← Back

Windows 11 24h2

windows_11_24h2

Vendor: Microsoft • 1,339 CVEs

CVEs (1,339)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
1Microsoft
8Windows 10 21h2
Windows 10 22h2Windows 11 22h2+5 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
8.4 HIGH· v3
N/A· v2
Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.
1Microsoft
8Windows 10 21h2
Windows 10 22h2Windows 11 22h2+5 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 9, 2025
Apr 8, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
1Microsoft
6Windows 11 22h2
Windows 11 23h2Windows 11 24h2+3 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
1Microsoft
6Windows 11 22h2
Windows 11 23h2Windows 11 24h2+3 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges locally.
1Microsoft
8Windows 10 1809
Windows 10 21h2Windows 10 22h2+5 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
5.1 MEDIUM· v3
N/A· v2
Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows Hello allows an unauthorized attacker to perform spoofing locally.
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Jul 10, 2025
Apr 8, 2025
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.