Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Microsoft
Windows 11 25h2

Microsoft windows 11 25h2 Vulnerabilities: CVEs, CISA KEV & Security Advisories

515 CVEs

13 in CISA KEV

Microsoft windows 11 25h2 Vulnerabilities

CVE security advisories and vulnerability history for windows 11 25h2 by Microsoft.

515

Total CVEs

Published

13

In CISA KEV

Exploited in the wild

20

Public exploits

With known exploit

7.2

Avg CVSS

2025–2026

Last updated May 19, 2026

Overview

Microsoft windows 11 25h2 has 515 published CVE records since 2025, of which 13 are in CISA's Known Exploited Vulnerabilities catalog and 20 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Microsoft windows 11 25h2, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Microsoft windows 11 25h2's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High388

Medium119

Low3

In CISA’s Known Exploited Vulnerabilities catalog

13

13 of Microsoft windows 11 25h2's CVEs are confirmed exploited in the wild.

Public exploits

20

20 of Microsoft windows 11 25h2's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Microsoft windows 11 25h2 version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

10.0.26200.8246118 CVEs
10.0.26200.6899117 CVEs
10.0.26200.762383 CVEs
10.0.26200.839056 CVEs
10.0.26200.797940 CVEs
10.0.26200.709234 CVEs
10.0.26200.739233 CVEs
10.0.26200.778126 CVEs
10.0.26200.84573 CVEs
10.0.26200.74561 CVE

Find a version

515 CVEs

Sort

Windows BitLocker Security Feature Bypass Vulnerability
CVE-2026-45585
Public exploit
Patch
CWE-77
Medium · CVSS 6.8
EPSS 0.1% (30th pct)2026-05-19
Secure Boot Security Feature Bypass Vulnerability
CVE-2026-41097
Patch
CWE-1329
Medium · CVSS 6.7
EPSS 0.3% (50th pct)2026-05-12
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40413
Patch
CWE-476
High · CVSS 7.4
EPSS 0.1% (34th pct)2026-05-12
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2026-40403
Patch
CWE-122
High · CVSS 8.8
EPSS 0.0% (4th pct)2026-05-12
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40401
Patch
CWE-476
High · CVSS 7.1
EPSS 0.0% (16th pct)2026-05-12
Windows Remote Desktop Services Elevation of Privilege Vulnerability
CVE-2026-40398
Patch
CWE-122
High · CVSS 7.8
EPSS 0.0% (6th pct)2026-05-12
Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
CVE-2026-32209
Patch
CWE-284
Medium · CVSS 4.4
EPSS 0.0% (13th pct)2026-05-12
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-40397
Patch
CWE-191
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-05-12
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-40382
Patch
CWE-416
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12
Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-40369
Patch
CWE-822
High · CVSS 7.8
EPSS 0.0% (3th pct)2026-05-12
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
CVE-2026-34341
Patch
CWE-415
High · CVSS 7.0
EPSS 0.0% (14th pct)2026-05-12
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2026-34340
Patch
CWE-416
High · CVSS 7.0
EPSS 0.0% (14th pct)2026-05-12
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2026-34339
Patch
CWE-476
Medium · CVSS 5.5
EPSS 0.0% (13th pct)2026-05-12
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-34338
Patch
CWE-416
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-34337
Patch
CWE-362
High · CVSS 7.8
EPSS 0.0% (13th pct)2026-05-12
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-34336
Patch
CWE-122
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12
Windows TCP/IP Elevation of Privilege Vulnerability
CVE-2026-34334
Patch
CWE-362
High · CVSS 7.8
EPSS 0.0% (13th pct)2026-05-12
Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2026-33838
Patch
CWE-415
High · CVSS 7.8
EPSS 0.1% (16th pct)2026-05-12
Windows TCP/IP Local Elevation of Privilege Vulnerability
CVE-2026-33837
Patch
CWE-122
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-05-12
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-33835
Patch
CWE-416
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-05-12
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-42896
Patch
CWE-190
High · CVSS 7.8
EPSS 0.1% (21th pct)2026-05-12
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-42825
Patch
CWE-416
High · CVSS 7.0
EPSS 0.0% (14th pct)2026-05-12
Windows Rich Text Edit Elevation of Privilege Vulnerability
CVE-2026-32170
Patch
CWE-415
Medium · CVSS 6.7
EPSS 0.1% (17th pct)2026-05-12
Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
CVE-2026-32161
Patch
CWE-362
High · CVSS 7.5
EPSS 0.1% (24th pct)2026-05-12
Windows DNS Client Remote Code Execution Vulnerability
CVE-2026-41096
Patch
CWE-122
Critical · CVSS 9.8
EPSS 0.0% (15th pct)2026-05-12
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2026-41088
Patch
CWE-73
High · CVSS 7.8
EPSS 0.1% (22th pct)2026-05-12
Windows TCP/IP Remote Code Execution Vulnerability
CVE-2026-40415
Patch
CWE-416
High · CVSS 8.1
EPSS 0.1% (26th pct)2026-05-12
Windows TCP/IP Denial of Service Vulnerability
CVE-2026-40414
Patch
CWE-476
High · CVSS 7.4
EPSS 0.1% (34th pct)2026-05-12
Windows SMB Client Elevation of Privilege Vulnerability
CVE-2026-40410
Patch
CWE-416
High · CVSS 7.0
EPSS 0.0% (14th pct)2026-05-12
Windows WAN ARP Driver Elevation of Privilege Vulnerability
CVE-2026-40408
Patch
CWE-416
High · CVSS 7.8
EPSS 0.0% (16th pct)2026-05-12

Showing 30 of 515

Common weakness types

The CWE weakness categories most often found in Microsoft windows 11 25h2 CVEs. Follow any weakness for its full explanation.

CWE-416Use After Free126 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')55 CVEs
CWE-122Heap-based Buffer Overflow52 CVEs
CWE-125Out-of-bounds Read31 CVEs
CWE-284Improper Access Control26 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor26 CVEs
CWE-822Untrusted Pointer Dereference24 CVEs
CWE-415Double Free18 CVEs

Disclosure activity by year

How many Microsoft windows 11 25h2 CVEs were published each year.

2025

186

2026

329

Other Microsoft products

Browse vulnerabilities for other products by Microsoft.

windows10,259 CVEs windows server 20165,207 CVEs windows server 20194,709 CVEs windows 104,437 CVEs windows server 20124,219 CVEs windows server 20084,083 CVEs Windows Server 2019 (Server Core installation)3,456 CVEs Windows 10 Version 18093,187 CVEs

All Microsoft vulnerabilities

Frequently asked questions

Common questions about Microsoft windows 11 25h2 vulnerabilities.

How many CVEs does Microsoft windows 11 25h2 have?

Microsoft windows 11 25h2 has 515 published CVE records since 2025.

How many Microsoft windows 11 25h2 CVEs are in CISA KEV?

Yes — 13 of Microsoft windows 11 25h2's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Microsoft windows 11 25h2 vulnerabilities?

Yes — 20 of Microsoft windows 11 25h2's CVEs have a known public exploit.

Which versions of Microsoft windows 11 25h2 are affected?

10 distinct Microsoft windows 11 25h2 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Microsoft windows 11 25h2 CVEs?

Microsoft windows 11 25h2's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')), CWE-122 (Heap-based Buffer Overflow), CWE-125 (Out-of-bounds Read).

How many critical Microsoft windows 11 25h2 vulnerabilities are there?

Microsoft windows 11 25h2 has 5 critical and 388 high-severity CVEs.

What is the average severity of Microsoft windows 11 25h2 CVEs?

The average CVSS base score across Microsoft windows 11 25h2's scored CVEs is 7.2.

References

All Microsoft vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Microsoft windows 11 25h2 vulnerabilities

Monitor new Microsoft windows 11 25h2 vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References