Microsoft Windows 11 Version 25H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 Version 25H2: 2835 record(s), with affected versions and fixes.
CVE-2026-83903
High · 7.8
CWE-122 Oct 13, 2026
Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83902
High · 7.8
CWE-122 Oct 13, 2026
Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83901
High · 7.0
CWE-416 Oct 13, 2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-83900
High · 7.0
CWE-416 Oct 13, 2026
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83899
High · 7.0
CWE-362 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-83898
Medium · 5.5
CWE-125 Oct 13, 2026
HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83897
Medium · 4.7
CWE-497 Oct 13, 2026
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
CVE-2026-83896
High · 7.8
CWE-122 Oct 13, 2026
Windows Direct Composition Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
CVE-2026-83895
Medium · 6.8
CWE-122 Oct 13, 2026
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83893
Medium · 5.5
CWE-497 Oct 13, 2026
Windows Clipboard User Service Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
CVE-2026-83892
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83889
High · 8.8
CWE-763 Oct 13, 2026
Windows DNS Server Remote Code Execution Vulnerability
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-83888
Medium · 6.5
CWE-126 Oct 13, 2026
Windows CD-ROM Driver Elevation of Privilege Vulnerability
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-83887
Medium · 5.5
CWE-125 Oct 13, 2026
HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83886
High · 7.0
CWE-416 Oct 13, 2026
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83885
Medium · 5.6
CWE-326 Oct 13, 2026
Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability
Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
CVE-2026-83884
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83883
High · 7.8
CWE-416 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-83882
High · 7.8
CWE-122 Oct 13, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83881
High · 7.8
CWE-122 Oct 13, 2026
Windows exFAT File System Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
CVE-2026-83879
High · 7.0
CWE-362 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-83877
High · 7.8
CWE-190 Oct 13, 2026
Windows Devices Human Interface Elevation of Privilege Vulnerability
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
CVE-2026-83876
High · 7.8
CWE-416 Oct 13, 2026
Windows Shell Elevation of Privilege Vulnerability
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-83875
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
CVE-2026-83874
High · 8.8
CWE-122 Oct 13, 2026
Windows Event Tracing Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.