Microsoft Windows 11 Version 25H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 Version 25H2: 2835 record(s), with affected versions and fixes.
CVE-2026-83638
High · 7.8
CWE-122 Oct 13, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83636
Medium · 6.5
CWE-476 Oct 13, 2026
Windows Hyper-V Denial of Service Vulnerability
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
CVE-2026-83634
High · 7.8
CWE-415 Oct 13, 2026
Windows BitLocker Elevation of Privilege Vulnerability
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-83588
High · 7.8
CWE-122 Oct 13, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83587
High · 7.8
CWE-822 Oct 13, 2026
Windows Core Messaging Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-83586
High · 7.8
CWE-1390 Oct 13, 2026
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83585
High · 7.8
CWE-134 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83584
High · 7.0
CWE-416 Oct 13, 2026
Windows Smart Card Elevation of Privilege Vulnerability
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-83583
High · 7.8
CWE-862 Oct 13, 2026
Windows Geotag Broker Elevation of Privilege Vulnerability
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-83582
Medium · 4.7
CWE-416 Oct 13, 2026
Windows Graphics Kernel Information Disclosure Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.
CVE-2026-83580
High · 7.0
CWE-122 Oct 13, 2026
Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83579
High · 7.8
CWE-122 Oct 13, 2026
Windows Smart Card Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-83578
Critical · 9.8
CWE-122 Oct 13, 2026
Microsoft PowerShell Remote Code Execution Vulnerability
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-83575
High · 7.0
CWE-416 Oct 13, 2026
Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83574
High · 7.0
CWE-416 Oct 13, 2026
Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83573
Medium · 6.8
CWE-190 Oct 13, 2026
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-83571
Medium · 5.5
CWE-476 Oct 13, 2026
Windows Audio Service Information Disclosure Vulnerability
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
CVE-2026-83570
High · 7.8
CWE-416 Oct 13, 2026
Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83569
High · 7.8
CWE-122 Oct 13, 2026
HID Parser Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.
CVE-2026-83568
High · 7.8
CWE-862 Oct 13, 2026
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83567
High · 7.8
CWE-125 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83566
High · 7.0
CWE-416 Oct 13, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2026-83565
Medium · 5.5
CWE-126 Oct 13, 2026
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-83564
High · 7.0
CWE-416 Oct 13, 2026
Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83523
High · 8.8
CWE-122 Oct 13, 2026
Windows Image Acquisition Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.