Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 25H2

Is your version affected?

CVE Summary Score Published
CVE-2026-83727 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83740 Use after free in Windows Hello allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83690 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83707 Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83691 Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83708 Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83699 Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate… 7.8 High Oct 13, 2026
CVE-2026-83692 Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83700 Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83693 Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network 9.8 Critical Oct 13, 2026
CVE-2026-83694 Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges… 7.0 High Oct 13, 2026
CVE-2026-83704 Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an… 7.8 High Oct 13, 2026
CVE-2026-83705 Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized… 5.5 Medium Oct 13, 2026
CVE-2026-83706 Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally 6.7 Medium Oct 13, 2026
CVE-2026-83687 Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges… 7.0 High Oct 13, 2026
CVE-2026-83688 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-83667 Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network 6.5 Medium Oct 13, 2026
CVE-2026-83678 Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83669 Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83671 Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally 6.5 Medium Oct 13, 2026
CVE-2026-83675 Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83650 Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83642 Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute… 8.8 High Oct 13, 2026
CVE-2026-83652 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83644 Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026

Other Microsoft products