Microsoft Windows 11 Version 25H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 Version 25H2: 2831 record(s), with affected versions and fixes.
CVE-2026-69514
High · 7.5
CWE-122 Sep 8, 2026
Remote Desktop Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
CVE-2026-69513
High · 7.8
CWE-122 Sep 8, 2026
Windows Error Reporting Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-69512
High · 8.8
CWE-122 Sep 8, 2026
Windows Spaceport.sys Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
CVE-2026-69511
High · 8.8
CWE-122 Sep 8, 2026
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-69509
High · 7.8
CWE-122 Sep 8, 2026
Role: Windows Fax Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69508
High · 7.8
CWE-121 Sep 8, 2026
Windows MIDI Service Module Elevation of Privileges Vulnerability
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-69507
Medium · 5.7
CWE-538 Sep 8, 2026
Microsoft Windows Search Component Information Disclosure Vulnerability
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network.
CVE-2026-69505
High · 8.0
CWE-125 Sep 8, 2026
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network.
CVE-2026-69504
Medium · 5.5
CWE-125 Sep 8, 2026
Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-69503
High · 8.0
CWE-121 Sep 8, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
CVE-2026-69501
High · 7.0
CWE-822 Sep 8, 2026
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69500
High · 7.0
CWE-416 Sep 8, 2026
Windows Image Acquisition Elevation of Privilege Vulnerability
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
CVE-2026-69499
High · 8.8
CWE-190 Sep 8, 2026
Windows Imaging Component Remote Code Execution Vulnerability
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69498
High · 7.0
CWE-416 Sep 8, 2026
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-69496
Critical · 9.8
CWE-122 Sep 8, 2026
Windows Compressed Folder Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network.
CVE-2026-69495
High · 8.8
CWE-122 Sep 8, 2026
Windows Event Logging Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-69494
High · 8.8
CWE-122 Sep 8, 2026
Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-69493
Critical · 9.8
CWE-122 Sep 8, 2026
Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
CVE-2026-69492
High · 7.0
CWE-122 Sep 8, 2026
Windows Partition Management Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69491
Critical · 9.8
CWE-122 Sep 8, 2026
Microsoft DirectMusic Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
CVE-2026-69490
Medium · 6.8
CWE-125 Sep 8, 2026
Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-69489
High · 7.8
CWE-122 Sep 8, 2026
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69488
High · 7.0
CWE-416 Sep 8, 2026
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69485
High · 8.8
CWE-908 Sep 8, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
CVE-2026-69483
Medium · 4.7
CWE-125 Sep 8, 2026
Windows Image Acquisition Information Disclosure Vulnerability
Out-of-bounds read in Windows Image Acquisition allows an authorized attacker to disclose information locally.