Microsoft Windows 11 Version 25H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 Version 25H2: 2831 record(s), with affected versions and fixes.
CVE-2026-69762
High · 8.8
CWE-121 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
CVE-2026-69761
High · 7.5
CWE-416 Sep 8, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69760
High · 7.5
CWE-125 Sep 8, 2026
Windows Kerberos Denial of Service Vulnerability
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVE-2026-69758
High · 7.8
CWE-122 Sep 8, 2026
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
CVE-2026-69757
High · 7.5
CWE-416 Sep 8, 2026
Windows TCP/IP Elevation of Privilege Vulnerability
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network.
CVE-2026-69744
High · 7.5
CWE-476 Sep 8, 2026
Windows Kerberos Denial of Service Vulnerability
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network.
CVE-2026-69741
Medium · 5.5
CWE-125 Sep 8, 2026
Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
CVE-2026-69740
High · 8.8
CWE-416 Sep 8, 2026
Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69738
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69735
High · 7.0
CWE-416 Sep 8, 2026
Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69732
High · 8.1
CWE-122 Sep 8, 2026
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-69731
High · 7.8
CWE-122 Sep 8, 2026
HID Class Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69729
High · 8.8
CWE-122 Sep 8, 2026
Windows Credential Providers Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.
CVE-2026-69727
High · 8.0
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69725
High · 7.8
CWE-415 Sep 8, 2026
Windows Hello Elevation of Privilege Vulnerability
Double free in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69723
Medium · 5.7
CWE-497 Sep 8, 2026
Windows Kernel Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information over a network.
CVE-2026-69720
High · 7.8
CWE-122 Sep 8, 2026
Windows MIDI Service Module Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69717
High · 8.8
CWE-125 Sep 8, 2026
Windows Group Policy Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
CVE-2026-69715
Critical · 9.8
CWE-122 Sep 8, 2026
Windows Direct Show Remote Code Execution Vulnerability
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.
CVE-2026-69714
High · 8.8
CWE-121 Sep 8, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network.
CVE-2026-69713
Medium · 4.4
CWE-1395 Sep 8, 2026
Windows Secure Boot Security Feature Bypass Vulnerability
Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
CVE-2026-69711
High · 7.0
CWE-416 Sep 8, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69710
High · 7.5
CWE-362 Sep 8, 2026
Windows Hello Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hello allows an authorized attacker to elevate privileges locally.
CVE-2026-69709
High · 7.8
CWE-122 Sep 8, 2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-69708
High · 7.0
CWE-416 Sep 8, 2026
Windows Web Platform Storage Elevation of Privilege Vulnerability
Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally.