Skip to content

Known vulnerabilities in Microsoft Windows 11 Version 25H2

Is your version affected?

CVE Summary Score Published
CVE-2026-77491 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally 5.5 Medium Sep 8, 2026
CVE-2026-69579 Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72986 Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69476 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69787 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-72982 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network 9.8 Critical Sep 8, 2026
CVE-2026-72983 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a… 9.8 Critical Sep 8, 2026
CVE-2026-72980 Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally 4.4 Medium Sep 8, 2026
CVE-2026-72981 Use after free in IP Helper allows an unauthorized attacker to execute code over a network 8.1 High Sep 8, 2026
CVE-2026-77495 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-70283 Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69846 Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally 8.2 High Sep 8, 2026
CVE-2026-69603 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally 8.8 High Sep 8, 2026
CVE-2026-69576 Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69604 Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69580 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69589 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69583 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026
CVE-2026-69548 Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to disclose information with a physical… 4.6 Medium Sep 8, 2026
CVE-2026-69518 Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network 8.8 High Sep 8, 2026
CVE-2026-69469 Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to… 6.6 Medium Sep 8, 2026
CVE-2026-69501 Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69394 Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69383 External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally 7.0 High Sep 8, 2026
CVE-2026-69293 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally 7.8 High Sep 8, 2026

Other Microsoft products