Microsoft Windows 11 Version 25H2 vulnerabilities
2,836 known vulnerabilities affecting microsoft/windows_11_version_25h2.
Total CVEs
2,836
CISA KEV
16
actively exploited
Public exploits
11
Exploited in wild
20
Severity breakdown
CRITICAL95HIGH2093MEDIUM642LOW6
Vulnerabilities
Page 28 of 142
CVE-2026-69432P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69432 [HIGH] CWE-122 CVE-2026-69432: Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privile
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70583P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-70583 [HIGH] CWE-122 CVE-2026-70583: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72967P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72967 [HIGH] CWE-122 CVE-2026-72967: Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to ele
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83988P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83988 [HIGH] CWE-122 CVE-2026-83988: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72944P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72944 [HIGH] CWE-122 CVE-2026-72944: Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69604P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69604 [HIGH] CWE-122 CVE-2026-69604: Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68841P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-68841 [HIGH] CWE-122 CVE-2026-68841: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73020P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-73020 [HIGH] CWE-122 CVE-2026-73020: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73000P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-73000 [HIGH] CWE-122 CVE-2026-73000: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83986P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83986 [HIGH] CWE-122 CVE-2026-83986: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69459P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69459 [HIGH] CWE-122 CVE-2026-69459: Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83976P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83976 [HIGH] CWE-122 CVE-2026-83976: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83954P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83954 [HIGH] CWE-122 CVE-2026-83954: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69348P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69348 [HIGH] CWE-122 CVE-2026-69348: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83978P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83978 [HIGH] CWE-122 CVE-2026-83978: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73015P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-73015 [HIGH] CWE-122 CVE-2026-73015: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72988P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72988 [HIGH] CWE-122 CVE-2026-72988: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69720P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69720 [HIGH] CWE-122 CVE-2026-69720: Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72991P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72991 [HIGH] CWE-122 CVE-2026-72991: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72994P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72994 [HIGH] CWE-20 CVE-2026-72994: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd