cbcvebase.

Microsoft Windows 11 25H2 vulnerabilities

2,797 known vulnerabilities affecting microsoft/windows_11_25h2.

Total CVEs
2,797
CISA KEV
17
actively exploited
Public exploits
10
Exploited in wild
20
Severity breakdown
CRITICAL94HIGH2067MEDIUM630LOW6

Vulnerabilities

Page 134 of 140
CVE-2026-62743P4MEDIUMCVSS 5.5fixed in 10.0.26200.91062026-08-11
CVE-2026-62743 [MEDIUM] CWE-125 CVE-2026-62743: Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62796P4MEDIUMCVSS 5.5fixed in 10.0.26200.91062026-08-11
CVE-2026-62796 [MEDIUM] CWE-125 CVE-2026-62796: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-65662P4MEDIUMCVSS 5.5fixed in 10.0.26200.91062026-08-11
CVE-2026-65662 [MEDIUM] CWE-125 CVE-2026-65662: Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
nvd
CVE-2026-61933P4MEDIUMCVSS 5.5fixed in 10.0.26200.91062026-08-11
CVE-2026-61933 [MEDIUM] CWE-125 CVE-2026-61933: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62786P4MEDIUMCVSS 5.5fixed in 10.0.26200.91062026-08-11
CVE-2026-62786 [MEDIUM] CWE-125 CVE-2026-62786: Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62738P4MEDIUMCVSS 5.5fixed in 10.0.26200.91062026-08-11
CVE-2026-62738 [MEDIUM] CWE-125 CVE-2026-62738: Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose i Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
nvd
CVE-2026-65784P4MEDIUMCVSS 5.5fixed in 10.0.26200.91062026-08-11
CVE-2026-65784 [MEDIUM] CWE-125 CVE-2026-65784: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-62703P4MEDIUMCVSS 5.5fixed in 10.0.26200.91062026-08-11
CVE-2026-62703 [MEDIUM] CWE-125 CVE-2026-62703: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50437P4MEDIUMCVSS 5.5fixed in 10.0.26200.88752026-07-14
CVE-2026-50437 [MEDIUM] CWE-125 CVE-2026-50437: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-42906P4MEDIUMCVSS 5.5fixed in 10.0.26200.86552026-06-09
CVE-2026-42906 [MEDIUM] CWE-200 CVE-2026-42906: Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized att Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83765P4MEDIUMCVSS 5.5fixed in 10.0.26200.97112026-10-13
CVE-2026-83765 [MEDIUM] CWE-125 CVE-2026-83765: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-83668P4MEDIUMCVSS 5.5fixed in 10.0.26200.97112026-10-13
CVE-2026-83668 [MEDIUM] CWE-125 CVE-2026-83668: Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information loc Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85374P4MEDIUMCVSS 5.5fixed in 10.0.26200.97112026-10-13
CVE-2026-85374 [MEDIUM] CWE-125 CVE-2026-85374: Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-85830P4MEDIUMCVSS 5.5fixed in 10.0.26200.97112026-10-13
CVE-2026-85830 [MEDIUM] CWE-125 CVE-2026-85830: Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.
nvd
CVE-2026-42968P4MEDIUMCVSS 5.5fixed in 10.0.26200.86552026-06-09
CVE-2026-42968 [MEDIUM] CWE-125 CVE-2026-42968: Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose informatio Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96860P4MEDIUMCVSS 5.5fixed in 10.0.26200.97112026-10-13
CVE-2026-96860 [MEDIUM] CWE-125 CVE-2026-96860: Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
nvd
CVE-2026-96927P4MEDIUMCVSS 5.5fixed in 10.0.26200.97112026-10-13
CVE-2026-96927 [MEDIUM] CWE-125 CVE-2026-96927: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
nvd
CVE-2026-35419P4MEDIUMCVSS 5.5fixed in 10.0.26200.83902026-05-12
CVE-2026-35419 [MEDIUM] CWE-125 CVE-2026-35419: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
nvd
CVE-2026-32084P4MEDIUMCVSS 5.5fixed in 10.0.26200.82462026-04-14
CVE-2026-32084 [MEDIUM] CWE-200 CVE-2026-32084: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an author Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.
nvd
CVE-2025-55334P4MEDIUMCVSS 5.5fixed in 10.0.26200.68992025-10-14
CVE-2025-55334 [MEDIUM] CWE-312 CVE-2025-55334: Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypa Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security feature locally.
nvd
Microsoft Windows 11 25H2 vulnerabilities | cvebase