Microsoft Windows 11 25H2 vulnerabilities, page 4
2,169 vulnerabilities
Known vulnerabilities in Microsoft Windows 11 25H2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-96937microsoftwindows_10_21h2+16
EPSS score0.20%
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.CVE-2026-96935microsoftwindows_10_1607+28EPSS score0.35%
Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-96933microsoftwindows_10_1607+28EPSS score0.31%
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.CVE-2026-96932microsoftwindows_10_1607+24EPSS score0.19%
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.CVE-2026-96931microsoftwindows_10_1607+28EPSS score0.31%
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96930microsoftwindows_10_1607+28EPSS score0.39%
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.CVE-2026-96928microsoftwindows_10_1607+28EPSS score0.31%
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96927microsoftwindows_10_1607+28EPSS score0.30%
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-96925microsoftwindows_10_1607+28EPSS score0.39%
Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.CVE-2026-96924microsoftwindows_10_1607+28EPSS score0.87%
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.CVE-2026-96923microsoftwindows_10_1607+28EPSS score0.25%
Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.CVE-2026-96921microsoftwindows_10_1607+28EPSS score0.39%
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.CVE-2026-96920microsoftwindows_10_1607+24EPSS score0.31%
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.CVE-2026-96919microsoftwindows_10_1809+17EPSS score0.15%
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.CVE-2026-96918microsoftwindows_10_1607+24EPSS score0.28%
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96917microsoftwindows_10_1809+20EPSS score0.31%
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.CVE-2026-96916microsoftwindows_10_1607+28EPSS score0.31%
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.CVE-2026-96915microsoftwindows_10_1607+28EPSS score0.24%
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.CVE-2026-96909microsoftwindows_11_23h2+12EPSS score0.87%
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.CVE-2026-96857microsoftwindows_10_1809+20EPSS score0.38%
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.