Microsoft Windows 11
By the Year
In 2024 there have been 188 vulnerabilities in Microsoft Windows 11 with an average score of 7.3 out of ten. Last year Windows 11 had 539 security vulnerabilities published. Right now, Windows 11 is on track to have less security vulnerabilities in 2024 than it did last year. Last year, the average CVE base score was greater by 0.21
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 188 | 7.32 |
| 2023 | 539 | 7.54 |
| 2022 | 501 | 7.44 |
| 2021 | 89 | 7.22 |
| 2020 | 0 | 0.00 |
| 2019 | 1 | 8.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Windows 11 vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Microsoft Windows 11 Security Vulnerabilities
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-26184
6.8 - Medium
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-28899
8.8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Windows MultiPoint Services Remote Code Execution Vulnerability
CVE-2024-30013
8.8 - High
- July 09, 2024
Windows MultiPoint Services Remote Code Execution Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-30071
4.7 - Medium
- July 09, 2024
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVE-2024-30079
7.8 - High
- July 09, 2024
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Windows NTLM Spoofing Vulnerability
CVE-2024-30081
7.1 - High
- July 09, 2024
Windows NTLM Spoofing Vulnerability
Windows Cryptographic Services Security Feature Bypass Vulnerability
CVE-2024-30098
7.5 - High
- July 09, 2024
Windows Cryptographic Services Security Feature Bypass Vulnerability
Windows iSCSI Service Denial of Service Vulnerability
CVE-2024-35270
5.3 - Medium
- July 09, 2024
Windows iSCSI Service Denial of Service Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37984
8.4 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37969
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37970
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37971
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37972
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37973
7.8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37974
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37977
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37978
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37981
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37975
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37986
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37987
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37988
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-37989
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-38010
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-38011
8 - High
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Xbox Wireless Adapter Remote Code Execution Vulnerability
CVE-2024-38078
7.5 - High
- July 09, 2024
Xbox Wireless Adapter Remote Code Execution Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38079
7.8 - High
- July 09, 2024
Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2024-38085
7.8 - High
- July 09, 2024
Windows Graphics Component Elevation of Privilege Vulnerability
Microsoft WS-Discovery Denial of Service Vulnerability
CVE-2024-38091
7.5 - High
- July 09, 2024
Microsoft WS-Discovery Denial of Service Vulnerability
PowerShell Elevation of Privilege Vulnerability
CVE-2024-38047
7.8 - High
- July 09, 2024
PowerShell Elevation of Privilege Vulnerability
Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
CVE-2024-38048
6.5 - Medium
- July 09, 2024
Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
Out-of-bounds Read
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
CVE-2024-38049
8.1 - High
- July 09, 2024
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
Externally Controlled Reference to a Resource in Another Sphere
Windows Workstation Service Elevation of Privilege Vulnerability
CVE-2024-38050
7.8 - High
- July 09, 2024
Windows Workstation Service Elevation of Privilege Vulnerability
Integer underflow
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2024-38051
7.8 - High
- July 09, 2024
Windows Graphics Component Remote Code Execution Vulnerability
Memory Corruption
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38052
7.8 - High
- July 09, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
CVE-2024-38053
8.8 - High
- July 09, 2024
Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
Dangling pointer
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38054
7.8 - High
- July 09, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Memory Corruption
Microsoft Windows Codecs Library Information Disclosure Vulnerability
CVE-2024-38055
5.5 - Medium
- July 09, 2024
Microsoft Windows Codecs Library Information Disclosure Vulnerability
Microsoft Windows Codecs Library Information Disclosure Vulnerability
CVE-2024-38056
5.5 - Medium
- July 09, 2024
Microsoft Windows Codecs Library Information Disclosure Vulnerability
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVE-2024-38057
7.8 - High
- July 09, 2024
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
BitLocker Security Feature Bypass Vulnerability
CVE-2024-38058
6.8 - Medium
- July 09, 2024
BitLocker Security Feature Bypass Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2024-38059
7.8 - High
- July 09, 2024
Win32k Elevation of Privilege Vulnerability
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVE-2024-38101
6.5 - Medium
- July 09, 2024
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVE-2024-38102
6.5 - Medium
- July 09, 2024
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Windows Fax Service Remote Code Execution Vulnerability
CVE-2024-38104
8.8 - High
- July 09, 2024
Windows Fax Service Remote Code Execution Vulnerability
Buffer Overflow
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVE-2024-38105
6.5 - Medium
- July 09, 2024
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Microsoft Windows Server Backup Elevation of Privilege Vulnerability
CVE-2024-38013
6.7 - Medium
- July 09, 2024
Microsoft Windows Server Backup Elevation of Privilege Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2024-38017
5.5 - Medium
- July 09, 2024
Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
CVE-2024-38019
7.2 - High
- July 09, 2024
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Integer Overflow or Wraparound
Windows Image Acquisition Elevation of Privilege Vulnerability
CVE-2024-38022
7 - High
- July 09, 2024
Windows Image Acquisition Elevation of Privilege Vulnerability
insecure temporary file
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
CVE-2024-38025
7.2 - High
- July 09, 2024
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Memory Corruption
Windows Line Printer Daemon Service Denial of Service Vulnerability
CVE-2024-38027
6.5 - Medium
- July 09, 2024
Windows Line Printer Daemon Service Denial of Service Vulnerability
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
CVE-2024-38028
7.2 - High
- July 09, 2024
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Out-of-bounds Read
Windows Themes Spoofing Vulnerability
CVE-2024-38030
6.5 - Medium
- July 09, 2024
Windows Themes Spoofing Vulnerability
Microsoft Xbox Remote Code Execution Vulnerability
CVE-2024-38032
7.1 - High
- July 09, 2024
Microsoft Xbox Remote Code Execution Vulnerability
Memory Corruption
PowerShell Elevation of Privilege Vulnerability
CVE-2024-38033
7.3 - High
- July 09, 2024
PowerShell Elevation of Privilege Vulnerability
Windows Filtering Platform Elevation of Privilege Vulnerability
CVE-2024-38034
7.8 - High
- July 09, 2024
Windows Filtering Platform Elevation of Privilege Vulnerability
Windows Kernel Information Disclosure Vulnerability
CVE-2024-38041
5.5 - Medium
- July 09, 2024
Windows Kernel Information Disclosure Vulnerability
PowerShell Elevation of Privilege Vulnerability
CVE-2024-38043
7.8 - High
- July 09, 2024
PowerShell Elevation of Privilege Vulnerability
Windows Imaging Component Remote Code Execution Vulnerability
CVE-2024-38060
8.8 - High
- July 09, 2024
Windows Imaging Component Remote Code Execution Vulnerability
Memory Corruption
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
CVE-2024-38061
7.5 - High
- July 09, 2024
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-38062
7.8 - High
- July 09, 2024
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Windows TCP/IP Information Disclosure Vulnerability
CVE-2024-38064
7.5 - High
- July 09, 2024
Windows TCP/IP Information Disclosure Vulnerability
Secure Boot Security Feature Bypass Vulnerability
CVE-2024-38065
6.8 - Medium
- July 09, 2024
Secure Boot Security Feature Bypass Vulnerability
Memory Corruption
Windows Win32k Elevation of Privilege Vulnerability
CVE-2024-38066
7.8 - High
- July 09, 2024
Windows Win32k Elevation of Privilege Vulnerability
Dangling pointer
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
CVE-2024-38068
7.5 - High
- July 09, 2024
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
Windows Enroll Engine Security Feature Bypass Vulnerability
CVE-2024-38069
7 - High
- July 09, 2024
Windows Enroll Engine Security Feature Bypass Vulnerability
Improper Verification of Cryptographic Signature
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
CVE-2024-38070
7.8 - High
- July 09, 2024
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2024-38080
7.8 - High
- July 09, 2024
Windows Hyper-V Elevation of Privilege Vulnerability
Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-38112
7.5 - High
- July 09, 2024
Windows MSHTML Platform Spoofing Vulnerability
User Interface (UI) Misrepresentation of Critical Information
Windows Perception Service Elevation of Privilege Vulnerability
CVE-2024-35265
7 - High
- June 11, 2024
Windows Perception Service Elevation of Privilege Vulnerability
TOCTTOU
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-35250
7.8 - High
- June 11, 2024
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Buffer Overflow
Win32k Elevation of Privilege Vulnerability
CVE-2024-30091
7.8 - High
- June 11, 2024
Win32k Elevation of Privilege Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-30080
9.8 - Critical
- June 11, 2024
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Dangling pointer
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30099
7 - High
- June 11, 2024
Windows Kernel Elevation of Privilege Vulnerability
TOCTTOU
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
CVE-2024-30097
8.8 - High
- June 11, 2024
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
Double-free
Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2024-30096
5.5 - Medium
- June 11, 2024
Windows Cryptographic Services Information Disclosure Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30095
7.8 - High
- June 11, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Memory Corruption
Windows Storage Elevation of Privilege Vulnerability
CVE-2024-30093
7.3 - High
- June 11, 2024
Windows Storage Elevation of Privilege Vulnerability
insecure temporary file
Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2024-30090
7 - High
- June 11, 2024
Microsoft Streaming Service Elevation of Privilege Vulnerability
Buffer Overflow
Microsoft Streaming Service Elevation of Privilege Vulnerability
CVE-2024-30089
7.8 - High
- June 11, 2024
Microsoft Streaming Service Elevation of Privilege Vulnerability
Dangling pointer
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVE-2024-30094
7.8 - High
- June 11, 2024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30088
7 - High
- June 11, 2024
Windows Kernel Elevation of Privilege Vulnerability
TOCTTOU
Win32k Elevation of Privilege Vulnerability
CVE-2024-30087
7.8 - High
- June 11, 2024
Win32k Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2024-30085
7.8 - High
- June 11, 2024
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVE-2024-30063
6.7 - Medium
- June 11, 2024
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Windows Themes Denial of Service Vulnerability
CVE-2024-30065
5.5 - Medium
- June 11, 2024
Windows Themes Denial of Service Vulnerability
Winlogon Elevation of Privilege Vulnerability
CVE-2024-30066
5.5 - Medium
- June 11, 2024
Winlogon Elevation of Privilege Vulnerability
Winlogon Elevation of Privilege Vulnerability
CVE-2024-30067
5.5 - Medium
- June 11, 2024
Winlogon Elevation of Privilege Vulnerability
Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30068
8.8 - High
- June 11, 2024
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds Read
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2024-30069
4.7 - Medium
- June 11, 2024
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Out-of-bounds Read
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
CVE-2024-30072
7.8 - High
- June 11, 2024
Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
Windows OLE Remote Code Execution Vulnerability
CVE-2024-30077
8 - High
- June 11, 2024
Windows OLE Remote Code Execution Vulnerability
Windows Container Manager Service Elevation of Privilege Vulnerability
CVE-2024-30076
6.8 - Medium
- June 11, 2024
Windows Container Manager Service Elevation of Privilege Vulnerability
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-30084
7 - High
- June 11, 2024
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
TOCTTOU
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2024-30086
7.8 - High
- June 11, 2024
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Windows Wi-Fi Driver Remote Code Execution Vulnerability
CVE-2024-30078
8.8 - High
- June 11, 2024
Windows Wi-Fi Driver Remote Code Execution Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2024-30082
7.8 - High
- June 11, 2024
Win32k Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2024-30051
7.8 - High
- May 14, 2024
Windows DWM Core Library Elevation of Privilege Vulnerability
Memory Corruption
Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2024-30040
8.8 - High
- May 14, 2024
Windows MSHTML Platform Security Feature Bypass Vulnerability
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Microsoft Windows Server 2016 or by Microsoft? Click the Watch button to subscribe.
