Microsoft Windows 11 Version 25H2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows 11 Version 25H2: 2825 record(s), with affected versions and fixes.
CVE-2026-62688
High · 7.8
CWE-122 Aug 11, 2026
Windows MIDI Service Module Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-61939
High · 7.0
CWE-416 Aug 11, 2026
Winlogon Elevation of Privilege Vulnerability
Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
CVE-2026-61938
High · 7.0
CWE-416 Aug 11, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-61937
High · 7.8
CWE-122 Aug 11, 2026
Windows HTTP.sys Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-61936
Medium · 5.5
CWE-862 Aug 11, 2026
Windows Defender Firewall Service Security Feature Bypass Vulnerability
Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.
CVE-2026-61934
High · 7.8
CWE-416 Aug 11, 2026
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61933
Medium · 5.5
CWE-125 Aug 11, 2026
Windows DWM Core Library Information Disclosure Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-61930
High · 7.8
CWE-122 Aug 11, 2026
Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61929
High · 7.0
CWE-416 Aug 11, 2026
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61928
Medium · 5.5
CWE-312 Aug 11, 2026
Windows Hello Tampering Vulnerability
Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
CVE-2026-61927
High · 7.0
CWE-362 Aug 11, 2026
Windows Bind Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61926
High · 7.8
CWE-122 Aug 11, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61925
High · 7.8
CWE-863 Aug 11, 2026
Windows Installer Elevation of Privilege Vulnerability
Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-61924
High · 7.5
CWE-125 Aug 11, 2026
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-61923
High · 7.8
CWE-122 Aug 11, 2026
Windows Display Enhancement Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
CVE-2026-61921
Medium · 6.5
CWE-125 Aug 11, 2026
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-61918
High · 7.5
CWE-125 Aug 11, 2026
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-61368
Medium · 5.5
CWE-122 Aug 11, 2026
Windows Hyper-V Information Disclosure Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
CVE-2026-61367
High · 7.8
CWE-306 Aug 11, 2026
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61366
High · 7.0
CWE-415 Aug 11, 2026
Windows Network Connection Broker Elevation of Privilege Vulnerability
Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-61365
High · 7.8
CWE-306 Aug 11, 2026
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61364
High · 7.8
CWE-306 Aug 11, 2026
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61363
High · 8.1
CWE-20 Aug 11, 2026
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-61361
High · 7.0
CWE-416 Aug 11, 2026
Windows DHCP Client Remote Code Execution Vulnerability
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
CVE-2026-61360
Medium · 5.5
CWE-822 Aug 11, 2026
Windows GDI Information Disclosure Vulnerability
Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.