Microsoft Windows 11 Version 25H2 vulnerabilities
2,826 known vulnerabilities affecting microsoft/windows_11_version_25h2.
Total CVEs
2,826
CISA KEV
16
actively exploited
Public exploits
11
Exploited in wild
20
Severity breakdown
CRITICAL99HIGH2087MEDIUM634LOW6
Vulnerabilities
Page 142 of 142
CVE-2026-20936P4MEDIUMCVSS 4.3≥ 10.0.26200.0, < 10.0.26200.76232026-01-13
CVE-2026-20936 [MEDIUM] CWE-125 CVE-2026-20936: Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a phys
Out-of-bounds read in Windows NDIS allows an authorized attacker to disclose information with a physical attack.
nvd
CVE-2026-45642P4LOWCVSS 3.9≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-45642 [LOW] CWE-20 CVE-2026-45642: Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Servi
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.
nvd
CVE-2026-57085P4LOWCVSS 3.3≥ 10.0.26200.0, < 10.0.26200.88752026-07-14
CVE-2026-57085 [LOW] CWE-125 CVE-2026-57085: Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50419P4LOWCVSS 3.3≥ 10.0.26200.0, < 10.0.26200.88752026-07-14
CVE-2026-50419 [LOW] CWE-200 CVE-2026-50419: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized at
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50416P4LOWCVSS 3.3≥ 10.0.26200.0, < 10.0.26200.88752026-07-14
CVE-2026-50416 [LOW] CWE-200 CVE-2026-50416: Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized at
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.
nvd
CVE-2025-55695P4LOWCVSS 3.3≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-55695 [LOW] CWE-125 CVE-2025-55695: Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose inf
Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.
nvd
← Previous142 / 142