Microsoft Windows 11 Version 25H2 vulnerabilities
2,832 known vulnerabilities affecting microsoft/windows_11_version_25h2.
Total CVEs
2,832
CISA KEV
16
actively exploited
Public exploits
11
Exploited in wild
20
Severity breakdown
CRITICAL99HIGH2092MEDIUM635LOW6
Vulnerabilities
Page 85 of 142
CVE-2026-108127P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-108127 [MEDIUM] CWE-125 CVE-2026-108127: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-108128P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-108128 [MEDIUM] CWE-125 CVE-2026-108128: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-108129P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-108129 [MEDIUM] CWE-125 CVE-2026-108129: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-70025P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-70025 [MEDIUM] CWE-416 CVE-2026-70025: Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
nvd
CVE-2026-20876P3MEDIUMCVSS 6.7≥ 10.0.26200.0, < 10.0.26200.76232026-01-13
CVE-2026-20876 [MEDIUM] CWE-122 CVE-2026-20876: Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authoriz
Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34348P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.88752026-07-14
CVE-2026-34348 [MEDIUM] CWE-693 CVE-2026-34348: Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to discl
Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-85331P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-85331 [MEDIUM] CWE-125 CVE-2026-85331: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97824P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97824 [MEDIUM] CWE-125 CVE-2026-97824: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97827P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97827 [MEDIUM] CWE-125 CVE-2026-97827: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97829P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97829 [MEDIUM] CWE-125 CVE-2026-97829: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97823P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97823 [MEDIUM] CWE-125 CVE-2026-97823: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97825P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97825 [MEDIUM] CWE-125 CVE-2026-97825: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97821P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97821 [MEDIUM] CWE-125 CVE-2026-97821: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97826P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97826 [MEDIUM] CWE-125 CVE-2026-97826: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97820P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97820 [MEDIUM] CWE-125 CVE-2026-97820: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97822P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97822 [MEDIUM] CWE-125 CVE-2026-97822: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97841P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97841 [MEDIUM] CWE-125 CVE-2026-97841: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97837P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97837 [MEDIUM] CWE-125 CVE-2026-97837: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97838P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97838 [MEDIUM] CWE-125 CVE-2026-97838: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97840P3MEDIUMCVSS 6.5≥ 10.0.26200.0, < 10.0.26200.97112026-10-13
CVE-2026-97840 [MEDIUM] CWE-125 CVE-2026-97840: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd