Microsoft Windows 11 Version 25H2 vulnerabilities
2,827 known vulnerabilities affecting microsoft/windows_11_version_25h2.
Total CVEs
2,827
CISA KEV
16
actively exploited
Public exploits
11
Exploited in wild
20
Severity breakdown
CRITICAL99HIGH2088MEDIUM634LOW6
Vulnerabilities
Page 120 of 142
CVE-2026-20927P4MEDIUMCVSS 5.3≥ 10.0.26200.0, < 10.0.26200.76232026-01-13
CVE-2026-20927 [MEDIUM] CWE-362 CVE-2026-20927: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network.
nvd
CVE-2026-62879P4MEDIUMCVSS 5.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-62879 [MEDIUM] CWE-306 CVE-2026-62879: Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to
Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-70057P4MEDIUMCVSS 5.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-70057 [MEDIUM] CWE-863 CVE-2026-70057: Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized att
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-73004P4MEDIUMCVSS 5.5≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-73004 [MEDIUM] CWE-306 CVE-2026-73004: Missing authentication for critical function in Windows Autopilot allows an authorized attacker to p
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-72964P4MEDIUMCVSS 5.5≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72964 [MEDIUM] CWE-306 CVE-2026-72964: Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an
Missing authentication for critical function in Windows Internet Connection Sharing (ICS) allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-69321P4MEDIUMCVSS 5.5≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69321 [MEDIUM] CWE-306 CVE-2026-69321: Missing authentication for critical function in Windows Power Dependency Coordinator allows an autho
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-69674P4MEDIUMCVSS 5.5≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69674 [MEDIUM] CWE-306 CVE-2026-69674: Missing authentication for critical function in Windows Modern Device Management (MDM) allows an aut
Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-83991P4MEDIUMCVSS 5.5≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83991 [MEDIUM] CWE-306 CVE-2026-83991: Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an aut
Missing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
nvd
CVE-2026-78451P4MEDIUMCVSS 6.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-78451 [MEDIUM] CWE-822 CVE-2026-78451: Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized att
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-69490P4MEDIUMCVSS 6.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69490 [MEDIUM] CWE-125 CVE-2026-69490: Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to eleva
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-62699P4MEDIUMCVSS 6.8≥ 10.0.26200.0, < 10.0.26200.91682026-08-11
CVE-2026-62699 [MEDIUM] CWE-122 CVE-2026-62699: Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an author
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
nvd
CVE-2026-83671P4MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-83671 [MEDIUM] CWE-125 CVE-2026-83671: Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
nvd
CVE-2026-55000P4MEDIUMCVSS 6.4≥ 10.0.26200.0, < 10.0.26200.88752026-07-14
CVE-2026-55000 [MEDIUM] CWE-416 CVE-2026-55000: Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges wit
Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-20821P4MEDIUMCVSS 6.2≥ 10.0.26200.0, < 10.0.26200.76232026-01-13
CVE-2026-20821 [MEDIUM] CWE-200 CVE-2026-20821: Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows a
Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-58543P4MEDIUMCVSS 6.3≥ 10.0.26200.0, < 10.0.26200.88752026-07-14
CVE-2026-58543 [MEDIUM] CWE-362 CVE-2026-58543: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-83500P4MEDIUMCVSS 6.1≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-83500 [MEDIUM] CWE-601 CVE-2026-83500: Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized atta
Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
nvd
CVE-2026-69569P4MEDIUMCVSS 5.7≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69569 [MEDIUM] CWE-822 CVE-2026-69569: Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to d
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network.
nvd
CVE-2026-85816P4MEDIUMCVSS 5.7≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-85816 [MEDIUM] CWE-125 CVE-2026-85816: Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information ove
Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.
nvd
CVE-2026-70055P4MEDIUMCVSS 5.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-70055 [MEDIUM] CWE-497 CVE-2026-70055: Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic
Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
nvd
CVE-2026-70260P4MEDIUMCVSS 5.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-70260 [MEDIUM] CWE-497 CVE-2026-70260: Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data H
Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.
nvd