CVE-2026-24283Disclosure(microsoft / windows_11_24h2)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-24283

Weakness type (CWE)

CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

windows_11_24h2
windows_11_25h2
windows_11_26h1
windows_server_2022_23h2

Threat summary

4 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-03-17)
4 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2022_23h2windows_server_2025

Deep dive

Activity timeline4 mentions / 3d

Signal classification2 categories

Disclosure

375.0%

General

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-10	1	Disclosure1
2026-03-11	1	General1
2026-03-17	2	Disclosure2

Full discourse4 posts

Infoflowcloud@infoflowcloud207d
Disclosure
🚨*CVE* CVE-2026-24283 Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally. https://www.cve.org/CVERecord?id=CVE-2026-24283 ----- Traducción: CVE-2026-24283 Desbordamiento de búfer basado en heaps en Windows File Serve… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑24283, a heap‑based buffer overflow in Windows File Server that permits local privilege escalation, but provides no PoC, exploit code, or remediation details.
0000049
59 followersView on X
CVE@CVEnew207d
Disclosure
CVE-2026-24283 Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally. https://www.cve.org/CVERecord?id=CVE-2026-24283
Post summary
CVE-2026-24283 describes a heap-based buffer overflow in Windows File Server that can lead to local privilege escalation, with no PoC, exploit, or patch information provided.
00000273
56.7K followersView on X
RedPacket Security@RedPacketSec213d
General
CVE Alert: CVE-2026-24283 - Microsoft - Windows 11 Version 24H2 - https://www.redpacketsecurity.com/cve-alert-cve-2026-24283-microsoft-windows-11-version-24h2/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-24283 #microsoft #windows-11-version-24h2
Post summary
The tweet is a brief CVE alert with a link to additional information but does not provide further details on the vulnerability, mitigation, or exploitation.
00000112
3.5K followersView on X
CVEFind.com@CveFindCom213d
Disclosure
[CVE-2026-24283: HIGH] Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally.#cve,CVE-2026-24283,#cybersecurity https://cvefind.com/CVE-2026-24283
Post summary
The tweet announces a high‑severity heap‑based buffer overflow in Windows File Server that enables local privilege escalation by authorized attackers.
0000033
601 followersView on X

CPE platform detail8 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

8 of 8 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	microsoft	windows_11_24h2	-	-	arm64
OS	microsoft	windows_11_24h2	-	-	x64
OS	microsoft	windows_11_25h2	-	-	arm64
OS	microsoft	windows_11_25h2	-	-	x64
OS	microsoft	windows_11_26h1	-	-	arm64
OS	microsoft	windows_11_26h1	-	-	x64
OS	microsoft	windows_server_2022_23h2	-	-	-
OS	microsoft	windows_server_2025	-	-	x64

Explore more

Back to dashboard microsoft CVEs windows_11_24h2 vulnerabilities

What researchers are saying

CVE-2026-24283

Infoflowcloud@infoflowcloudDisclosure

The tweet announces CVE‑2026‑24283, a heap‑based buffer overflow in Windows File Server that permits local privilege escalation, but provides no PoC, exploit code, or remediation details.

CVE@CVEnewDisclosure

CVE-2026-24283 describes a heap-based buffer overflow in Windows File Server that can lead to local privilege escalation, with no PoC, exploit, or patch information provided.

RedPacket Security@RedPacketSecGeneral

The tweet is a brief CVE alert with a link to additional information but does not provide further details on the vulnerability, mitigation, or exploitation.

CVEFind.com@CveFindComDisclosure

The tweet announces a high‑severity heap‑based buffer overflow in Windows File Server that enables local privilege escalation by authorized attackers.