cbcvebase.

Microsoft Windows 11 25H2 vulnerabilities

995 known vulnerabilities affecting microsoft/windows_11_25h2.

Total CVEs
995
CISA KEV
13
actively exploited
Public exploits
10
Exploited in wild
16
Severity breakdown
CRITICAL25HIGH744MEDIUM220LOW6

Vulnerabilities

Page 32 of 50
CVE-2025-55689P3HIGHCVSS 7.0fixed in 10.0.26200.68992025-10-14
CVE-2025-55689 [HIGH] CWE-416 CVE-2025-55689: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55686P3HIGHCVSS 7.0fixed in 10.0.26200.68992025-10-14
CVE-2025-55686 [HIGH] CWE-416 CVE-2025-55686: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55331P3HIGHCVSS 7.0fixed in 10.0.26200.68992025-10-14
CVE-2025-55331 [HIGH] CWE-416 CVE-2025-55331: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55690P3HIGHCVSS 7.0fixed in 10.0.26200.68992025-10-14
CVE-2025-55690 [HIGH] CWE-416 CVE-2025-55690: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-62569P3HIGHCVSS 7.0fixed in 10.0.26200.73922025-12-09
CVE-2025-62569 [HIGH] CWE-416 CVE-2025-62569: Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privilege Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-23667P3HIGHCVSS 7.0fixed in 10.0.26200.79792026-03-10
CVE-2026-23667 [HIGH] CWE-416 CVE-2026-23667: Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally. Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55688P3HIGHCVSS 7.0fixed in 10.0.26200.68992025-10-14
CVE-2025-55688 [HIGH] CWE-416 CVE-2025-55688: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55684P3HIGHCVSS 7.0fixed in 10.0.26200.68992025-10-14
CVE-2025-55684 [HIGH] CWE-416 CVE-2025-55684: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55691P3HIGHCVSS 7.0fixed in 10.0.26200.68992025-10-14
CVE-2025-55691 [HIGH] CWE-416 CVE-2025-55691: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-25170P3HIGHCVSS 7.0fixed in 10.0.26200.79792026-03-10
CVE-2026-25170 [HIGH] CWE-416 CVE-2026-25170: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-55678P3HIGHCVSS 7.0fixed in 10.0.26200.68992025-10-14
CVE-2025-55678 [HIGH] CWE-416 CVE-2025-55678: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32075P3HIGHCVSS 7.0fixed in 10.0.26200.82462026-04-14
CVE-2026-32075 [HIGH] CWE-416 CVE-2026-32075: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34347P3HIGHCVSS 7.0fixed in 10.0.26200.83902026-05-12
CVE-2026-34347 [HIGH] CWE-416 CVE-2026-34347: Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42984P3HIGHCVSS 7.0fixed in 10.0.26200.86552026-06-09
CVE-2026-42984 [HIGH] CWE-416 CVE-2026-42984: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-56173P3HIGHCVSS 7.0fixed in 10.0.26200.88752026-07-14
CVE-2026-56173 [HIGH] CWE-416 CVE-2026-56173: Use after free in Windows WebView allows an authorized attacker to elevate privileges locally. Use after free in Windows WebView allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59189P3HIGHCVSS 7.0fixed in 10.0.26200.68992025-10-14
CVE-2025-59189 [HIGH] CWE-416 CVE-2025-59189: Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privile Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-58629P3HIGHCVSS 7.0fixed in 10.0.26200.88752026-07-14
CVE-2026-58629 [HIGH] CWE-416 CVE-2026-58629: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50397P3HIGHCVSS 7.0fixed in 10.0.26200.88752026-07-14
CVE-2026-50397 [HIGH] CWE-416 CVE-2026-50397: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59259P3MEDIUMCVSS 6.5fixed in 10.0.26200.68992025-10-14
CVE-2025-59259 [MEDIUM] CWE-1287 CVE-2025-59259: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an auth Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
nvd
CVE-2025-59257P3MEDIUMCVSS 6.5fixed in 10.0.26200.68992025-10-14
CVE-2025-59257 [MEDIUM] CWE-1287 CVE-2025-59257: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an auth Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
nvd
← Previous32 / 50Next →
Microsoft Windows 11 25H2 vulnerabilities | cvebase