Login Request a demo
W1
Product
Windows 11 24h2
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
3,331
CVEs
49
On KEV
9.9
Max CVSS
782
New 30D
Vulnerabilities3,331In the news12Timeline
Severity mix
Critical 100High 390Medium 10Low 0
Severity
All severities500Critical100High390Medium10Low0
Exploitation
On CISA KEV49Exploited in the wild49
Watch

Add Windows 11 24h2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-56649
8.1
1%
Jul 14
Windows Network File System Remote Code Execution Vulnerability
Affected: before 10.0.26100.8875; before 10.0.26100.8875
CVE-2026-56188
8.1
1%
Jul 14
Windows Server Network driver Remote Code Execution Vulnerability
Affected: before 10.0.26100.8875
CVE-2026-50686
8.1
1%
Jul 14
Windows OLE Remote Code Execution Vulnerability
Affected: before 10.0.26100.8875
CVE-2026-50460
8.1
1%
Jul 14
Windows Runtime Elevation of Privilege Vulnerability
Affected: before 10.0.26100.8875; before 10.0.26100.8875
CVE-2026-50348
8.1
0%
Jul 14
Windows Runtime Elevation of Privilege Vulnerability
Affected: before 10.0.26100.8875; before 10.0.26100.8875
CVE-2026-50452
8.1
0%
Jul 14
Windows Runtime Elevation of Privilege Vulnerability
Affected: before 10.0.26100.8875; before 10.0.26100.8875
CVE-2026-42900
8.1
1%
Jul 14
Microsoft Windows App Store Elevation of Privilege Vulnerability
Affected: before 10.0.26100.8875; before 10.0.26100.8875
CVE-2026-42974
8.1
1%
Jun 9
Windows Performance Monitor Remote Code Execution Vulnerability
Affected: before 10.0.26100.8655; before 10.0.26100.8655
CVE-2026-42981
8.1
1%
Jun 9
Windows Performance Monitor Remote Code Execution Vulnerability
Affected: before 10.0.26100.8655; before 10.0.26100.8655
CVE-2026-45635
8.1
1%
Jun 9
Windows UPnP Device Host Remote Code Execution Vulnerability
Affected: before 10.0.26100.8655; before 10.0.26100.8655
CVE-2026-45599
8.1
1%
Jun 9
Windows UPnP Device Host Remote Code Execution Vulnerability
Affected: before 10.0.26100.8655; before 10.0.26100.8655
CVE-2026-40415
8.1
1%
May 12
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.26100.8390; before 10.0.26100.8390
CVE-2026-33827
8.1
1%
Apr 14
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.26100.8246; before 10.0.26100.8246
CVE-2026-20856
8.1
1%
Jan 13
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Affected: before 10.0.26100.7623
CVE-2025-50177
8.1
4%
Aug 12
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: before 10.0.26100.4851
CVE-2025-33054
8.1
1%
Jul 8
Remote Desktop Spoofing Vulnerability
Affected: before 10.0.26100.4652
CVE-2025-33070
8.1
10%
Jun 10
Windows Netlogon Elevation of Privilege Vulnerability
Affected: before 10.0.26100.4270
CVE-2025-29828
8.1
1%
Jun 10
Windows Schannel Remote Code Execution Vulnerability
Affected: before 10.0.26100.4270
CVE-2025-26670
8.1
11%
Apr 8
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Affected: before 10.0.26100.3775
CVE-2025-26663
8.1
2%
Apr 8
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.26100.3775
CVE-2025-24035
8.1
2%
Mar 11
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.26100.3403
CVE-2025-21376
8.1
9%
Feb 11
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.26100.3194
CVE-2025-21224
8.1
2%
Jan 14
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
Affected: before 10.0.26100.2894
CVE-2025-21295
8.1
2%
Jan 14
SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
Affected: before 10.0.26100.2894
CVE-2025-21294
8.1
1%
Jan 14
Microsoft Digest Authentication Remote Code Execution Vulnerability
Affected: before 10.0.26100.2894
CVE-2024-49127
8.1
1%
Dec 10
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Affected: before 10.0.26100.2605
CVE-2024-49118
8.1
1%
Dec 10
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: before 10.0.26100.2605
CVE-2024-49132
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.26100.2605
CVE-2024-49126
8.1
1%
Dec 10
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
Affected: before 10.0.26100.2605
CVE-2024-49124
8.1
1%
Dec 10
Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability
Affected: before 10.0.26100.2605
CVE-2024-49123
8.1
1%
Dec 10
Windows Remote Desktop Services Remote Code Execution Vulnerability
Affected: before 10.0.26100.2605
CVE-2024-49122
8.1
21%
Dec 10
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Affected: before 10.0.26100.2605
CVE-2024-43625
8.1
1%
Nov 12
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Affected: before 10.0.26100.2314; before 10.0.26100.2314
CVE-2024-43582
8.1
3%
Oct 8
Remote Desktop Protocol Server Remote Code Execution Vulnerability
Affected: before 10.0.26100.2033; before 10.0.26100.2033
CVE-2024-38045
8.1
1%
Sep 10
Windows TCP/IP Remote Code Execution Vulnerability
Affected: before 10.0.26100.1742; before 10.0.26100.1742
CVE-2026-96844
8.0
1%
Oct 13
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Affected: before 10.0.26100.9711; before 10.0.26100.9711
CVE-2026-83838
8.0
1%
Oct 13
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
Affected: before 10.0.26100.9711; before 10.0.26100.9711
CVE-2026-69363
8.0
1%
Oct 13
Windows Error Reporting Elevation of Privilege Vulnerability
Affected: before 10.0.26100.9711; before 10.0.26100.9711
CVE-2026-69807
8.0
1%
Sep 8
PowerShell Elevation of Privilege Vulnerability
Affected: before 10.0.26100.9445; before 10.0.26100.9445
CVE-2026-69777
8.0
1%
Sep 8
Windows DHCP Client Elevation of Privilege Vulnerability
Affected: before 10.0.26100.9445; before 10.0.26100.9445
Page 8 of 8 · 390 total
1…78
The 500 most important CVEs for this product (exploited first, then by severity)