Microsoft Corp Windows 11 25H2

Name: Microsoft Corp Windows 11 25H2
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

38critical230high38medium2low

updated 2026-10-27

vulnerabilities (1,106)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	≤ 10.0.26200.8246
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	≤ 10.0.26200.8246
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	2 versions
CVE-2026-20805US	—OT critical	7.46% (94th)	KEV	no fix	2026-01-13	≤ 10.0.26200.7623
CVE-2025-24990US	—OT critical	6.37% (94th)	KEV	no fix	2025-10-14	≤ 10.0.26200.6899
CVE-2025-47827US	—OT critical	4.93% (92nd)	KEV	no fix	2025-06-05	≤ 10.0.26200.6899
CVE-2025-60710US	—OT critical	4.61% (92nd)	KEV	no fix	2025-11-11	2 versions
CVE-2025-62215US	—OT critical	4.46% (91st)	KEV	no fix	2025-11-11	2 versions
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	no fix	2026-02-10	2 versions
CVE-2025-62221US	—OT critical	2.50% (85th)	KEV	no fix	2025-12-09	2 versions
CVE-2026-81963US	high7.8OT critical	0.39% (33rd)	KEV	no fix	2026-09-08	≤ 10.0.26200.9445
CVE-2026-68820US	—OT critical	0.33% (26th)	KEV	no fix	2026-08-11	2 versions
CVE-2026-21513US	—OT critical	15.9% (97th)	KEV	no fix	2026-02-10	2 versions
CVE-2026-96951US	high8.8OT critical	9.81% (96th)	KEV	no fix	2026-10-13	≤ 10.0.26200.9711
CVE-2026-21525US	—OT critical	4.87% (92nd)	KEV	no fix	2026-02-10	2 versions
CVE-2025-59230US	—OT critical	2.66% (86th)	KEV	no fix	2025-10-14	≤ 10.0.26200.6899
CVE-2026-21519US	—OT critical	2.48% (84th)	KEV	no fix	2026-02-10	2 versions
CVE-2026-49160US	—	56.6% (99th)	Exploit	no fix	2026-06-09	≤ 10.0.26200.8655
CVE-2026-42980US	—	6.95% (94th)	Exploit	no fix	2026-06-09	≤ 10.0.26200.8655
CVE-2026-20817US	—	5.42% (93rd)	Exploit	no fix	2026-01-13	≤ 10.0.26200.7623
CVE-2026-24294US	—	4.85% (92nd)	Exploit	no fix	2026-03-10	2 versions
CVE-2026-40369US	—	4.72% (92nd)	Exploit	no fix	2026-05-12	2 versions
CVE-2026-33829US	—	3.51% (89th)	Exploit	no fix	2026-04-14	≤ 10.0.26200.8246
CVE-2026-24291US	—	3.30% (88th)	Exploit	no fix	2026-03-10	2 versions
CVE-2026-41096US	—	2.70% (86th)	Exploit	no fix	2026-05-12	2 versions
CVE-2025-59194US	—	2.67% (86th)	Exploit	no fix	2025-10-14	≤ 10.0.26200.6899
CVE-2026-20820US	—	2.56% (85th)	Exploit	no fix	2026-01-13	≤ 10.0.26200.7623
CVE-2025-62454US	—	2.29% (83rd)	Exploit	no fix	2025-12-09	2 versions
CVE-2025-54100US	—	2.23% (83rd)	Exploit	no fix	2025-12-09	2 versions
CVE-2025-60719US	—	1.93% (80th)	Exploit	no fix	2025-11-11	2 versions
CVE-2026-45585US	—	1.89% (79th)	Exploit	no fix	2026-05-20	≤ 10.0.26200.8655
CVE-2026-25177US	—	1.33% (71st)	Exploit	no fix	2026-03-10	2 versions
CVE-2026-21248US	—	1.33% (71st)	Exploit	no fix	2026-02-10	2 versions
CVE-2026-21244US	—	1.33% (71st)	Exploit	no fix	2026-02-10	2 versions
CVE-2025-59254US	—	1.11% (66th)	Exploit	no fix	2025-10-14	≤ 10.0.26200.6899
CVE-2026-21250US	—	1.11% (66th)	Exploit	no fix	2026-02-10	2 versions
CVE-2025-59284US	medium5.5	1.03% (63rd)	Exploit	no fix	2025-10-14	≤ 10.0.26200.6899
CVE-2025-58726US	—	1.01% (63rd)	Exploit	no fix	2025-10-14	≤ 10.0.26200.6899
CVE-2026-34348US	—	1.00% (62nd)	Exploit	no fix	2026-07-14	≤ 10.0.26200.8875
CVE-2026-56190US	—	0.97% (62nd)	Exploit	no fix	2026-07-14	≤ 10.0.26100.8875
CVE-2026-49179US	—	0.86% (58th)	Exploit	no fix	2026-08-11	2 versions
CVE-2026-33827US	—	0.84% (58th)	Exploit	no fix	2026-04-14	≤ 10.0.26200.8246
CVE-2026-50369US	—	0.70% (53rd)	Exploit	no fix	2026-07-14	≤ 10.0.26200.8875
CVE-2026-26128US	—	0.65% (51st)	Exploit	no fix	2026-03-10	2 versions
CVE-2025-60709US	—	0.53% (45th)	Exploit	no fix	2025-11-11	2 versions
CVE-2026-32223US	—	0.52% (44th)	Exploit	no fix	2026-04-14	≤ 10.0.26200.8246
CVE-2025-62470US	—	0.51% (43rd)	Exploit	no fix	2025-12-09	2 versions
CVE-2026-54984US	—	0.47% (40th)	Exploit	no fix	2026-08-11	2 versions
CVE-2026-50416US	low3.3	0.46% (40th)	Exploit	no fix	2026-07-14	≤ 10.0.26200.8875
CVE-2026-69328US	high7.8	0.46% (39th)	Exploit	no fix	2026-09-08	≤ 10.0.26200.9445

showing 50 of 1,106

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free300 CVEs
CWE-122Heap-based Buffer Overflow260 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')157 CVEs
CWE-125Out-of-bounds Read81 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor48 CVEs
CWE-190Integer Overflow or Wraparound41 CVEs
CWE-284Improper Access Control39 CVEs
CWE-822Untrusted Pointer Dereference31 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)1,103 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan