Microsoft Windows 11 25H2 vulnerabilities
2,788 known vulnerabilities affecting microsoft/windows_11_25h2.
Total CVEs
2,788
CISA KEV
17
actively exploited
Public exploits
10
Exploited in wild
20
Severity breakdown
CRITICAL94HIGH2063MEDIUM625LOW6
Vulnerabilities
Page 91 of 140
CVE-2026-85364P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-85364 [HIGH] CWE-416 CVE-2026-85364: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88141P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-88141 [HIGH] CWE-416 CVE-2026-88141: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85361P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-85361 [HIGH] CWE-416 CVE-2026-85361: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87708P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-87708 [HIGH] CWE-416 CVE-2026-87708: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88124P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-88124 [HIGH] CWE-416 CVE-2026-88124: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96302P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-96302 [HIGH] CWE-416 CVE-2026-96302: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96305P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-96305 [HIGH] CWE-416 CVE-2026-96305: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96216P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-96216 [HIGH] CWE-416 CVE-2026-96216: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102211P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-102211 [HIGH] CWE-362 CVE-2026-102211: Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96313P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-96313 [HIGH] CWE-306 CVE-2026-96313: Missing authentication for critical function in Windows Push Notifications allows an authorized atta
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85846P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-85846 [HIGH] CWE-416 CVE-2026-85846: Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges lo
Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62780P3HIGHCVSS 7.0fixed in 10.0.26200.91062026-08-11
CVE-2026-62780 [HIGH] CWE-362 CVE-2026-62780: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96307P3HIGHCVSS 7.0fixed in 10.0.26200.97112026-10-13
CVE-2026-96307 [HIGH] CWE-416 CVE-2026-96307: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83649P3MEDIUMCVSS 6.5fixed in 10.0.26200.97112026-10-13
CVE-2026-83649 [MEDIUM] CWE-125 CVE-2026-83649: Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorize
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83667P3MEDIUMCVSS 6.5fixed in 10.0.26200.97112026-10-13
CVE-2026-83667 [MEDIUM] CWE-125 CVE-2026-83667: Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service
Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83648P3MEDIUMCVSS 6.5fixed in 10.0.26200.97112026-10-13
CVE-2026-83648 [MEDIUM] CWE-476 CVE-2026-83648: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
nvd
CVE-2026-69374P3MEDIUMCVSS 6.5fixed in 10.0.26200.94452026-09-08
CVE-2026-69374 [MEDIUM] CWE-770 CVE-2026-69374: Allocation of resources without limits or throttling in Windows SMB Server allows an authorized atta
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network.
nvd
CVE-2026-83521P3MEDIUMCVSS 6.5fixed in 10.0.26200.97112026-10-13
CVE-2026-83521 [MEDIUM] CWE-125 CVE-2026-83521: Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information ov
Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-56186P3MEDIUMCVSS 6.5fixed in 10.0.26200.88752026-07-14
CVE-2026-56186 [MEDIUM] CWE-125 CVE-2026-56186: Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a
Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.
nvd
CVE-2025-64670P3MEDIUMCVSS 6.5fixed in 10.0.26200.73922025-12-09
CVE-2025-64670 [MEDIUM] CWE-200 CVE-2025-64670: Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an
Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information over a network.
nvd