← Back

Windows 11 25h2

windows_11_25h2

Vendor: Microsoft • 1,181 CVEs

CVEs (1,181)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
1Microsoft
7Windows 10 21h2
Windows 10 22h2Windows 11 24h2+4 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Aug 12, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 21h2+8 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 22, 2026
Jul 14, 2026
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.
1Microsoft
5Windows 11 24h2
Windows 11 25h2Windows 11 26h1+2 more
Jul 21, 2026
Jul 14, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 20, 2026
Jul 14, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 20, 2026
Jul 14, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Jul 20, 2026
Jul 14, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.