cbcvebase.

Microsoft Windows 11 25H2 vulnerabilities

2,336 known vulnerabilities affecting microsoft/windows_11_25h2.

Total CVEs
2,336
CISA KEV
17
actively exploited
Public exploits
10
Exploited in wild
20
Severity breakdown
CRITICAL79HIGH1727MEDIUM524LOW6

Vulnerabilities

Page 9 of 117
CVE-2026-69334P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69334 [HIGH] CWE-122 CVE-2026-69334: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69601P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69601 [HIGH] CWE-122 CVE-2026-69601: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73023P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-73023 [HIGH] CWE-122 CVE-2026-73023: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69291P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69291 [HIGH] CWE-122 CVE-2026-69291: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62744P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-62744 [HIGH] CWE-122 CVE-2026-62744: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69360P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69360 [HIGH] CWE-122 CVE-2026-69360: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69860P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69860 [HIGH] CWE-122 CVE-2026-69860: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69386P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69386 [HIGH] CWE-122 CVE-2026-69386: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-77495P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-77495 [HIGH] CWE-122 CVE-2026-77495: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-77504P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-77504 [HIGH] CWE-415 CVE-2026-77504: Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69772P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69772 [HIGH] CWE-122 CVE-2026-69772: Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69495P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69495 [HIGH] CWE-122 CVE-2026-69495: Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execu Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69511P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69511 [HIGH] CWE-122 CVE-2026-69511: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69434P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69434 [HIGH] CWE-122 CVE-2026-69434: Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-72933P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-72933 [HIGH] CWE-122 CVE-2026-72933: Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69669P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-69669 [HIGH] CWE-122 CVE-2026-69669: Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83992P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-83992 [HIGH] CWE-122 CVE-2026-83992: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73013P3HIGHCVSS 8.8fixed in 10.0.26200.94452026-09-08
CVE-2026-73013 [HIGH] CWE-122 CVE-2026-73013: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62795P3HIGHCVSS 8.8fixed in 10.0.26200.91062026-08-11
CVE-2026-62795 [HIGH] CWE-416 CVE-2026-62795: Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attack Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-57094P3HIGHCVSS 8.8fixed in 10.0.26200.88752026-07-14
CVE-2026-57094 [HIGH] CWE-122 CVE-2026-57094: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
nvd
Microsoft Windows 11 25H2 vulnerabilities | cvebase