cbcvebase.

Microsoft Windows 11 Version 25H2 vulnerabilities

2,836 known vulnerabilities affecting microsoft/windows_11_version_25h2.

Total CVEs
2,836
CISA KEV
16
actively exploited
Public exploits
11
Exploited in wild
20
Severity breakdown
CRITICAL95HIGH2093MEDIUM642LOW6

Vulnerabilities

Page 29 of 142
CVE-2026-69352P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69352 [HIGH] CWE-20 CVE-2026-69352: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72995P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72995 [HIGH] CWE-122 CVE-2026-72995: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69787P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69787 [HIGH] CWE-122 CVE-2026-69787: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-78448P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-78448 [HIGH] CWE-122 CVE-2026-78448: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69508P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69508 [HIGH] CWE-121 CVE-2026-69508: Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72992P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72992 [HIGH] CWE-122 CVE-2026-72992: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83980P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83980 [HIGH] CWE-122 CVE-2026-83980: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69801P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69801 [HIGH] CWE-122 CVE-2026-69801: Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73001P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-73001 [HIGH] CWE-122 CVE-2026-73001: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69489P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69489 [HIGH] CWE-122 CVE-2026-69489: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71334P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-71334 [HIGH] CWE-122 CVE-2026-71334: Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83982P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83982 [HIGH] CWE-122 CVE-2026-83982: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70289P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-70289 [HIGH] CWE-122 CVE-2026-70289: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83977P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83977 [HIGH] CWE-122 CVE-2026-83977: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72993P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72993 [HIGH] CWE-122 CVE-2026-72993: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83971P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83971 [HIGH] CWE-122 CVE-2026-83971: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72997P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-72997 [HIGH] CWE-122 CVE-2026-72997: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83985P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-83985 [HIGH] CWE-122 CVE-2026-83985: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68892P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-68892 [HIGH] CWE-122 CVE-2026-68892: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68850P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-68850 [HIGH] CWE-122 CVE-2026-68850: Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
nvd
Microsoft Windows 11 Version 25H2 vulnerabilities | cvebase