Windows 11 24h2 vulnerabilities

350 known vulnerabilities in Windows 11 24h2 from Microsoft. 341 are rated high or critical, and 49 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-62693Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-62690Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Improper Link Resolution Before File Access

  CVE-2026-61358Aug 11, 2026Microsoft

  Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-61352Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

• 7.0 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-59126Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-59122Aug 11, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

• 8.8 High severity

  Windows 10 Version 1607: Improper Neutralization of Special Elements used in a Command

  CVE-2026-49179Aug 11, 2026Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.

• 7.0 High severity

  Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-58598Jul 16, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-58628Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-58531Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-58527Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-56649Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-56188Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-54125Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50676Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50669Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50667Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Microsoft .NET Framework 3.5 AND 4.7.2: Loop with Unreachable Exit Condition

  CVE-2026-50647Jul 14, 2026MicrosoftEPSS 1.17%

  Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50503Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 11 Version 24H2: Improper Neutralization of Special Elements used in a Command

  CVE-2026-50488Jul 14, 2026Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Improper Link Resolution Before File Access

  CVE-2026-50469Jul 14, 2026Microsoft

  Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.

• 8.1 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50460Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

• 8.1 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50452Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

• 7.8 High severity

  Windows 10 Version 1607: Missing Authentication for Critical Functionality

  CVE-2026-50451Jul 14, 2026Microsoft

  Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50450Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50440Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Access of Resource Using Incompatible Type

  CVE-2026-50421Jul 14, 2026Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

• 8.8 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50414Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50404Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50403Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50398Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

• 8.8 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50385Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50379Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50378Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50371Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally.

• 8.1 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50348Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50345Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50322Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50321Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50317Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally.