cbcvebase.

Microsoft Windows 11 Version 25H2 vulnerabilities

618 known vulnerabilities affecting microsoft/windows_11_version_25h2.

Total CVEs
618
CISA KEV
12
actively exploited
Public exploits
10
Exploited in wild
14
Severity breakdown
CRITICAL9HIGH465MEDIUM141LOW3

Vulnerabilities

Page 22 of 31
CVE-2026-26177P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.82462026-04-14
CVE-2026-26177 [HIGH] CWE-416 CVE-2026-26177: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27922P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.82462026-04-14
CVE-2026-27922 [HIGH] CWE-416 CVE-2026-27922: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26182P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.82462026-04-14
CVE-2026-26182 [HIGH] CWE-416 CVE-2026-26182: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-27918P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.82462026-04-14
CVE-2026-27918 [HIGH] CWE-362 CVE-2026-27918: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42911P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-42911 [HIGH] CWE-416 CVE-2026-42911: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34335P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-34335 [HIGH] CWE-416 CVE-2026-34335: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-33839P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.84572026-05-12
CVE-2026-33839 [HIGH] CWE-362 CVE-2026-33839: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34331P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.84572026-05-12
CVE-2026-34331 [HIGH] CWE-362 CVE-2026-34331: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-42912P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-42912 [HIGH] CWE-362 CVE-2026-42912: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26173P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.82462026-04-14
CVE-2026-26173 [HIGH] CWE-362 CVE-2026-26173: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45601P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-45601 [HIGH] CWE-362 CVE-2026-45601: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45596P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-45596 [HIGH] CWE-362 CVE-2026-45596: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45598P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-45598 [HIGH] CWE-362 CVE-2026-45598: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45603P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-45603 [HIGH] CWE-362 CVE-2026-45603: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-58729P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-58729 [MEDIUM] CWE-1287 CVE-2025-58729: Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an auth Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
nvd
CVE-2025-58739P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-58739 [MEDIUM] CWE-200 CVE-2025-58739: Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauth Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-42903P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-42903 [MEDIUM] CWE-476 CVE-2026-42903: Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a ne Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network.
nvd
CVE-2026-42907P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.86552026-06-09
CVE-2026-42907 [MEDIUM] CWE-200 CVE-2026-42907: Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized att Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally.
nvd
CVE-2025-60723P3MEDIUMCVSS 6.3≥ 10.0.26200.0, < 10.0.26200.71712025-11-11
CVE-2025-60723 [MEDIUM] CWE-362 CVE-2025-60723: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DirectX allows an authorized attacker to deny service over a network.
nvd
CVE-2025-59208P3HIGHCVSS 7.1≥ 10.0.26200.0, < 10.0.26200.68992025-10-14
CVE-2025-59208 [HIGH] CWE-125 CVE-2025-59208: Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information o Out-of-bounds read in Windows MapUrlToZone allows an unauthorized attacker to disclose information over a network.
nvd
← Previous22 / 31Next →