Microsoft Windows 11 Version 25H2 vulnerabilities
2,836 known vulnerabilities affecting microsoft/windows_11_version_25h2.
Total CVEs
2,836
CISA KEV
16
actively exploited
Public exploits
11
Exploited in wild
20
Severity breakdown
CRITICAL95HIGH2093MEDIUM642LOW6
Vulnerabilities
Page 36 of 142
CVE-2026-70132P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-70132 [HIGH] CWE-122 CVE-2026-70132: Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attack
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83514P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-83514 [HIGH] CWE-122 CVE-2026-83514: Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to e
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70048P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-70048 [HIGH] CWE-122 CVE-2026-70048: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83518P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-10-13
CVE-2026-83518 [HIGH] CWE-122 CVE-2026-83518: Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70112P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-70112 [HIGH] CWE-122 CVE-2026-70112: Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code lo
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
nvd
CVE-2026-83881P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-83881 [HIGH] CWE-122 CVE-2026-83881: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70093P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-70093 [HIGH] CWE-122 CVE-2026-70093: Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83569P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-83569 [HIGH] CWE-122 CVE-2026-83569: Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-78459P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-78459 [HIGH] CWE-122 CVE-2026-78459: Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to
Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102215P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-102215 [HIGH] CWE-122 CVE-2026-102215: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102218P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-102218 [HIGH] CWE-122 CVE-2026-102218: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102205P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-102205 [HIGH] CWE-122 CVE-2026-102205: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50501P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.88752026-07-14
CVE-2026-50501 [HIGH] CWE-121 CVE-2026-50501: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-88128P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-88128 [HIGH] CWE-122 CVE-2026-88128: Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate priv
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83692P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-83692 [HIGH] CWE-122 CVE-2026-83692: Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83638P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-83638 [HIGH] CWE-122 CVE-2026-83638: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70238P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-70238 [HIGH] CWE-122 CVE-2026-70238: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83588P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-83588 [HIGH] CWE-122 CVE-2026-83588: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-105003P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-105003 [HIGH] CWE-122 CVE-2026-105003: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88147P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-88147 [HIGH] CWE-122 CVE-2026-88147: Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized a
Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.
nvd