Skip to content

Vulnerabilities of Microsoft Windows 11 version 22H2

Is your version affected?

CVE Summary Score Published
CVE-2025-55328 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an… 7.8 High Oct 14, 2025
CVE-2025-55326 Use after free in Connected Devices Platform Service (Cdpsvc) allows an unauthorized attacker to execute code over a… 7.5 High Oct 14, 2025
CVE-2025-53768 Use after free in Xbox allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-53139 Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security… 7.7 High Oct 14, 2025
CVE-2025-53150 Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-50175 Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-50152 Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-53717 Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security (VBS) Enclave allows an… 7.0 High Oct 14, 2025
CVE-2025-25004 Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally 7.3 High Oct 14, 2025
CVE-2025-48813 Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally 6.3 Medium Oct 14, 2025
CVE-2025-59502 Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service… 7.5 High Oct 14, 2025
CVE-2025-59295 Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network 8.8 High Oct 14, 2025
CVE-2025-59294 Exposure of sensitive information to an unauthorized actor in Windows Taskbar Live allows an unauthorized attacker to… 2.1 Low Oct 14, 2025
CVE-2025-59290 Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-59284 Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform… 3.3 Low Oct 14, 2025
CVE-2025-59282 Concurrent execution using shared resource with improper synchronization ('race condition') in Inbox COM Objects… 7.0 High Oct 14, 2025
CVE-2025-59280 Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network 3.1 Low Oct 14, 2025
CVE-2025-59277 Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to… 7.8 High Oct 14, 2025
CVE-2025-59259 Improper validation of specified type of input in Windows Local Session Manager (LSM) allows an authorized attacker to… 6.5 Medium Oct 14, 2025
CVE-2025-59255 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-59254 Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025
CVE-2025-59242 Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate… 7.8 High Oct 14, 2025
CVE-2025-49708 Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network 9.9 Critical Oct 14, 2025
CVE-2025-59211 Exposure of sensitive information to an unauthorized actor in Windows Push Notification Core allows an authorized… 5.5 Medium Oct 14, 2025
CVE-2025-59207 Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 14, 2025

Other Microsoft products