Microsoft Windows 11 Version 25H2 vulnerabilities

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to bypass a security feature locally.

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally.

Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.