Microsoft Windows 11 Version 25H2

productDE

cpe:/o:microsoft:windows_11:version_25h2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

10critical117high30medium2low

updated 2026-10-27

vulnerabilities (1,065)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	—
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	—
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	—
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	no fix	2026-02-10	—
CVE-2026-68820US	—OT critical	0.33% (26th)	KEV	no fix	2026-08-11	—
CVE-2026-21513US	—OT critical	15.9% (97th)	KEV	no fix	2026-02-10	—
CVE-2026-21525US	—OT critical	4.87% (92nd)	KEV	no fix	2026-02-10	—
CVE-2026-21519US	—OT critical	2.48% (84th)	KEV	no fix	2026-02-10	—
CVE-2026-56155US	—OT critical	0.35% (28th)	KEV	no fix	2026-07-14	—
CVE-2026-41089US	—	79.6% (100th)	Exploit	no fix	2026-05-12	—
CVE-2026-49160US	—	56.6% (99th)	Exploit	no fix	2026-06-09	—
CVE-2026-42980US	—	6.95% (94th)	Exploit	no fix	2026-06-09	—
CVE-2026-50507US	—OT elevated	5.02% (92nd)	Exploit	no fix	2026-06-09	—
CVE-2026-24294US	—	4.85% (92nd)	Exploit	no fix	2026-03-10	—
CVE-2026-40369US	—	4.72% (92nd)	Exploit	no fix	2026-05-12	—
CVE-2026-33829US	—	3.51% (89th)	Exploit	no fix	2026-04-14	—
CVE-2026-24291US	—	3.30% (88th)	Exploit	no fix	2026-03-10	—
CVE-2026-41096US	—	2.70% (86th)	Exploit	no fix	2026-05-12	—
CVE-2026-25177US	—	1.33% (71st)	Exploit	no fix	2026-03-10	—
CVE-2026-21248US	—	1.33% (71st)	Exploit	no fix	2026-02-10	—
CVE-2026-21244US	—	1.33% (71st)	Exploit	no fix	2026-02-10	—
CVE-2026-45504US	—	1.18% (68th)	Exploit	no fix	2026-06-09	—
CVE-2026-21250US	—	1.11% (66th)	Exploit	no fix	2026-02-10	—
CVE-2026-34348US	—	1.00% (62nd)	Exploit	no fix	2026-07-14	—
CVE-2026-62878US	—	0.97% (62nd)	Exploit	no fix	2026-08-11	—
CVE-2026-56190US	—	0.97% (62nd)	Exploit	no fix	2026-07-14	—
CVE-2026-25172US	—	0.94% (61st)	Exploit	no fix	2026-03-10	—
CVE-2026-49179US	—	0.86% (58th)	Exploit	no fix	2026-08-11	—
CVE-2026-33827US	—	0.84% (58th)	Exploit	no fix	2026-04-14	—
CVE-2026-47301US	—	0.78% (56th)	Exploit	no fix	2026-07-14	—
CVE-2026-54121US	—	0.78% (56th)	Exploit	no fix	2026-07-14	—
CVE-2026-50369US	—	0.70% (53rd)	Exploit	no fix	2026-07-14	—
CVE-2026-62911US	—OT elevated	0.69% (53rd)	Exploit	no fix	2026-08-11	—
CVE-2026-26128US	—	0.65% (51st)	Exploit	no fix	2026-03-10	—
CVE-2026-33826US	—	0.53% (45th)	Exploit	no fix	2026-04-14	—
CVE-2026-32223US	—	0.52% (44th)	Exploit	no fix	2026-04-14	—
CVE-2026-54984US	—	0.47% (40th)	Exploit	no fix	2026-08-11	—
CVE-2026-50416US	low3.3	0.46% (40th)	Exploit	no fix	2026-07-14	—
CVE-2026-21508US	high7.0	0.45% (39th)	Exploit	no fix	2026-02-10	—
CVE-2026-26179US	—	0.44% (38th)	Exploit	no fix	2026-04-14	—
CVE-2026-27912US	—	0.41% (35th)	Exploit	no fix	2026-04-14	—
CVE-2026-54992US	high7.8	0.34% (27th)	Exploit	no fix	2026-07-14	—
CVE-2026-62737US	—	0.33% (26th)	Exploit	no fix	2026-08-11	—
CVE-2026-62735US	—	0.33% (26th)	Exploit	no fix	2026-08-11	—
CVE-2026-50402US	—	0.33% (27th)	Exploit	no fix	2026-07-14	—
CVE-2026-49176US	—	0.33% (26th)	Exploit	no fix	2026-07-14	—
CVE-2026-58635US	—	0.32% (25th)	Exploit	no fix	2026-07-14	—
CVE-2026-34344US	—	0.31% (24th)	Exploit	no fix	2026-05-12	—
CVE-2026-66804US	—	0.30% (22nd)	Exploit	no fix	2026-08-11	—
CVE-2026-50343US	—	0.30% (22nd)	Exploit	no fix	2026-07-14	—

showing 50 of 1,065

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free305 CVEs
CWE-122Heap-based Buffer Overflow210 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')137 CVEs
CWE-125Out-of-bounds Read93 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor47 CVEs
CWE-190Integer Overflow or Wraparound42 CVEs
CWE-284Improper Access Control34 CVEs
CWE-121Stack-based Buffer Overflow27 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)1,065 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan