Microsoft Windows 11 Version 25H2 vulnerabilities
2,832 known vulnerabilities affecting microsoft/windows_11_version_25h2.
Total CVEs
2,832
CISA KEV
16
actively exploited
Public exploits
11
Exploited in wild
20
Severity breakdown
CRITICAL98HIGH2091MEDIUM637LOW6
Vulnerabilities
Page 70 of 142
CVE-2026-69687P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69687 [HIGH] CWE-191 CVE-2026-69687: Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an au
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69844P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69844 [HIGH] CWE-125 CVE-2026-69844: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69535P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69535 [HIGH] CWE-122 CVE-2026-69535: Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privilege
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-77489P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-77489 [HIGH] CWE-476 CVE-2026-77489: Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privi
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69532P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69532 [HIGH] CWE-125 CVE-2026-69532: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69608P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69608 [HIGH] CWE-190 CVE-2026-69608: Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker t
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69822P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69822 [HIGH] CWE-122 CVE-2026-69822: Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges loc
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69312P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69312 [HIGH] CWE-125 CVE-2026-69312: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70581P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-70581 [HIGH] CWE-20 CVE-2026-70581: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69450P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69450 [HIGH] CWE-125 CVE-2026-69450: Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges lo
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69561P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69561 [HIGH] CWE-125 CVE-2026-69561: Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges loca
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70569P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-70569 [HIGH] CWE-125 CVE-2026-70569: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69298P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69298 [HIGH] CWE-190 CVE-2026-69298: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70574P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-70574 [HIGH] CWE-125 CVE-2026-70574: Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to eleva
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70572P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-70572 [HIGH] CWE-190 CVE-2026-70572: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69265P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.94452026-09-08
CVE-2026-69265 [HIGH] CWE-125 CVE-2026-69265: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62737P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.91682026-08-11
CVE-2026-62737 [HIGH] CWE-822 CVE-2026-62737: Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62751P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.91682026-08-11
CVE-2026-62751 [HIGH] CWE-190 CVE-2026-62751: Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to ele
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62876P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.91682026-08-11
CVE-2026-62876 [HIGH] CWE-125 CVE-2026-62876: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62733P3HIGHCVSS 7.8≥ 10.0.26200.0, < 10.0.26200.91682026-08-11
CVE-2026-62733 [HIGH] CWE-125 CVE-2026-62733: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd