Microsoft Windows 11 Version 25H2 vulnerabilities

2,832 known vulnerabilities affecting microsoft/windows_11_version_25h2.

Total CVEs

2,832

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL98HIGH2091MEDIUM637LOW6

Vulnerabilities

SortPage 84 of 142

CVE-2026-70241P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.97112026-10-13

CVE-2026-70241 [HIGH] CWE-416 CVE-2026-70241: Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83717P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.97112026-10-13

CVE-2026-83717 [HIGH] CWE-416 CVE-2026-83717: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83924P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.97112026-10-13

CVE-2026-83924 [HIGH] CWE-416 CVE-2026-83924: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69915P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.97112026-10-13

CVE-2026-69915 [HIGH] CWE-416 CVE-2026-69915: Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-70160P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.97112026-10-13

CVE-2026-70160 [HIGH] CWE-416 CVE-2026-70160: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-25171P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.80372026-03-10

CVE-2026-25171 [HIGH] CWE-416 CVE-2026-25171: Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-72963P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.94452026-09-08

CVE-2026-72963 [HIGH] CWE-416 CVE-2026-72963: Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privilege Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69281P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.94452026-09-08

CVE-2026-69281 [HIGH] CWE-416 CVE-2026-69281: Use after free in Windows License Manager allows an authorized attacker to elevate privileges locall Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69331P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.94452026-09-08

CVE-2026-69331 [HIGH] CWE-416 CVE-2026-69331: Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-71342P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.94452026-09-08

CVE-2026-71342 [HIGH] CWE-416 CVE-2026-71342: Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-71333P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.94452026-09-08

CVE-2026-71333 [HIGH] CWE-416 CVE-2026-71333: Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85360P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.94452026-09-08

CVE-2026-85360 [HIGH] CWE-416 CVE-2026-85360: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69473P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.94452026-09-08

CVE-2026-69473 [HIGH] CWE-416 CVE-2026-69473: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-32087P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.82462026-04-14

CVE-2026-32087 [HIGH] CWE-122 CVE-2026-32087: Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker t Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-73005P3HIGHCVSS 7.0≥ 10.0.26200.0, < 10.0.26200.94452026-09-08

CVE-2026-73005 [HIGH] CWE-362 CVE-2026-73005: Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-20847P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.76232026-01-13

CVE-2026-20847 [MEDIUM] CWE-200 CVE-2026-20847: Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized att Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to perform spoofing over a network.

nvd

CVE-2026-83685P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13

CVE-2026-83685 [MEDIUM] CWE-126 CVE-2026-83685: Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a netwo Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.

nvd

CVE-2026-70072P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13

CVE-2026-70072 [MEDIUM] CWE-770 CVE-2026-70072: Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attack Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

nvd

CVE-2026-83521P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13

CVE-2026-83521 [MEDIUM] CWE-125 CVE-2026-83521: Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information ov Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.

nvd

CVE-2026-97819P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13

CVE-2026-97819 [MEDIUM] CWE-125 CVE-2026-97819: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

nvd

← Previous84 / 142Next →