CVE Intelligence

Microsoft Windows 11 25h2 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Microsoft Windows 11 25h2: 2262 record(s), with affected versions and fixes.
cpe:2.3:o:microsoft:windows_11_25h2

CVE-2026-83970 High · 7.8 CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83969 High · 7.8 CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83968 High · 7.8 CWE-400 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83967 High · 7.8 CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83955 High · 7.8 CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83954 High · 7.8 CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83952 High · 7.8 CWE-122 Sep 8, 2026
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-83942 High · 7.8 CWE-862 Sep 8, 2026
Windows Kernel Elevation of Privilege Vulnerability
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83940 High · 7.0 CWE-416 Sep 8, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83501 Medium · 5.5 CWE-125 Sep 8, 2026
Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
CVE-2026-83498 High · 7.8 CWE-822 Sep 8, 2026
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-81963 High · 7.8 KEV High · 46 CWE-59 Sep 8, 2026
Microsoft Windows Link Following Vulnerability
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2026-81355 High · 7.8 CWE-122 Sep 8, 2026
Virtual Hard Disk (VHD) Miniport Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to execute code locally.
CVE-2026-81354 High · 8.2 CWE-122 Sep 8, 2026
Windows Hello Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-80096 High · 8.8 CWE-125 Sep 8, 2026
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVE-2026-80093 High · 7.0 CWE-416 Sep 8, 2026
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-80083 High · 8.8 CWE-822 Sep 8, 2026
Windows Hyper-V Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
CVE-2026-80075 High · 7.8 CWE-122 Sep 8, 2026
Windows Work Folders Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVE-2026-78516 Medium · 4.3 CWE-126 Sep 8, 2026
Windows Storage Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.
CVE-2026-78508 Medium · 4.6 CWE-125 Sep 8, 2026
Windows CD-ROM Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78464 High · 7.0 CWE-367 Sep 8, 2026
Windows MIDI Service Module Elevation of Privileges Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-78455 Medium · 4.3 CWE-125 Sep 8, 2026
Xbox Information Disclosure Vulnerability
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-78457 High · 7.0 CWE-416 Sep 8, 2026
Windows Security Health Service Elevation of Privilege Vulnerability
Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.
CVE-2026-78454 Medium · 5.5 CWE-125 Sep 8, 2026
Windows CD-ROM Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.
CVE-2026-78453 Medium · 6.5 CWE-191 Sep 8, 2026
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.