Microsoft Windows 11 Version 25H2 vulnerabilities

452 known vulnerabilities affecting microsoft/windows_11_version_25h2.

Total CVEs
452
CISA KEV
11
actively exploited
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH337MEDIUM110LOW2

Vulnerabilities

Page 20 of 23
CVE-2025-59187HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-59187 [HIGH] CWE-20 CVE-2025-59187: Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges loca Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-50152HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-50152 [HIGH] CWE-125 CVE-2025-50152: Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-55689HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-55689 [HIGH] CWE-416 CVE-2025-55689: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59196HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-59196 [HIGH] CWE-362 CVE-2025-59196: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-58716HIGHCVSS 8.8≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-58716 [HIGH] CWE-20 CVE-2025-58716: Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privi Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-58734HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-58734 [HIGH] CWE-416 CVE-2025-58734: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
cvelistv5nvd
CVE-2025-59241HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-59241 [HIGH] CWE-59 CVE-2025-59241: Improper link resolution before file access ('link following') in Windows Health and Optimized Exper Improper link resolution before file access ('link following') in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59206HIGHCVSS 7.4≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-59206 [HIGH] CWE-416 CVE-2025-59206: Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
cvelistv5nvd
CVE-2025-55693HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-55693 [HIGH] CWE-416 CVE-2025-55693: Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-55331HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-55331 [HIGH] CWE-416 CVE-2025-55331: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59195HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-59195 [HIGH] CWE-362 CVE-2025-59195: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.
cvelistv5nvd
CVE-2025-58727HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-58727 [HIGH] CWE-362 CVE-2025-58727: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-55698HIGHCVSS 7.7≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-55698 [HIGH] CWE-476 CVE-2025-55698: Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a net Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network.
cvelistv5nvd
CVE-2025-59205HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-59205 [HIGH] CWE-362 CVE-2025-59205: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59200HIGHCVSS 7.7≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-59200 [HIGH] CWE-73 CVE-2025-59200: Concurrent execution using shared resource with improper synchronization ('race condition') in Data Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.
cvelistv5nvd
CVE-2025-55685HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-55685 [HIGH] CWE-416 CVE-2025-55685: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges l Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-55678HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-55678 [HIGH] CWE-416 CVE-2025-55678: Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally. Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-59242HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-59242 [HIGH] CWE-122 CVE-2025-59242: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-58714HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-58714 [HIGH] CWE-284 CVE-2025-58714: Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attack Improper access control in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
cvelistv5nvd
CVE-2025-58733HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-58733 [HIGH] CWE-416 CVE-2025-58733: Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
cvelistv5nvd
← Previous20 / 23Next →