Patch tracker / Products / Windows 11 Version 25H2

Windows 11 Version 25H2: vulnerabilities and security updates

Every CVE affecting Windows 11 Version 25H2 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
373
Updates (KBs)
28
Actively exploited (KEV)
7
Critical Severity
18

CVEs affecting Windows 11 Version 25H2

CVESeverityCVSSEPSSStatus
CVE-2025-60710High7.84.6%KEVRansomware
CVE-2026-33824Critical9.873%KEV
CVE-2026-20805Medium5.576%KEV
CVE-2025-24990High7.86.3%KEV
CVE-2025-59230High7.86.3%KEV
CVE-2025-62221High7.84.6%KEV
CVE-2025-47827Medium4.66.3%KEV
CVE-2026-41089Critical9.880%-
CVE-2026-41096Critical9.880%-
CVE-2026-32209Critical9.880%-
CVE-2025-54518Critical9.880%-
CVE-2026-34329High8.880%-
CVE-2026-40403High8.880%-
CVE-2026-20962Critical9.876%-
CVE-2026-20825Critical9.876%-
CVE-2026-20828Critical9.876%-
CVE-2026-20834Critical9.876%-
CVE-2026-20936Critical9.876%-
CVE-2025-6965Critical9.876%-
CVE-2026-40415High8.180%-
CVE-2026-34332High8.080%-
CVE-2026-20928Critical9.873%-
CVE-2026-26175Critical9.873%-
CVE-2026-32220Critical9.873%-
CVE-2026-33829Critical9.873%-
CVE-2026-27906Critical9.873%-
CVE-2026-33834High7.880%-
CVE-2026-34330High7.880%-
CVE-2026-34333High7.880%-
CVE-2026-34343High7.880%-
CVE-2026-34344High7.880%-
CVE-2026-34351High7.880%-
CVE-2026-35415High7.880%-
CVE-2026-35417High7.880%-
CVE-2026-35418High7.880%-
CVE-2026-35420High7.880%-
CVE-2026-35421High7.880%-
CVE-2026-40377High7.880%-
CVE-2026-40399High7.880%-
CVE-2026-40407High7.880%-
CVE-2026-40408High7.880%-
CVE-2026-41088High7.880%-
CVE-2026-41095High7.880%-
CVE-2026-42896High7.880%-
CVE-2026-33835High7.880%-
CVE-2026-33837High7.880%-
CVE-2026-33838High7.880%-
CVE-2026-34334High7.880%-
CVE-2026-34336High7.880%-
CVE-2026-34337High7.880%-
CVE-2026-34338High7.880%-
CVE-2026-40369High7.880%-
CVE-2026-40382High7.880%-
CVE-2026-40397High7.880%-
CVE-2026-40398High7.880%-
CVE-2026-33841High7.880%-
CVE-2026-33840High7.880%-
CVE-2026-20868High8.876%-
CVE-2026-35424High7.580%-
CVE-2026-40405High7.580%-
CVE-2026-40406High7.580%-
CVE-2026-32161High7.580%-
CVE-2026-40414High7.480%-
CVE-2026-40413High7.480%-
CVE-2026-40401High7.180%-
CVE-2026-20856High8.176%-
CVE-2026-33839High7.080%-
CVE-2026-34331High7.080%-
CVE-2026-34342High7.080%-
CVE-2026-34345High7.080%-
CVE-2026-34347High7.080%-
CVE-2026-35416High7.080%-
CVE-2026-40410High7.080%-
CVE-2026-42825High7.080%-
CVE-2026-34340High7.080%-
CVE-2026-34341High7.080%-
CVE-2026-20931High8.076%-
CVE-2026-26167High8.873%-
CVE-2026-26178High8.873%-
CVE-2026-32157High8.873%-
CVE-2026-32225High8.873%-
CVE-2026-27928High8.773%-
CVE-2026-20809High7.876%-
CVE-2026-20811High7.876%-
CVE-2026-20816High7.876%-
CVE-2026-20817High7.876%-
CVE-2026-20820High7.876%-
CVE-2026-20822High7.876%-
CVE-2026-20826High7.876%-
CVE-2026-20831High7.876%-
CVE-2026-20832High7.876%-
CVE-2026-20837High7.876%-
CVE-2026-20840High7.876%-
CVE-2023-31096High7.876%-
CVE-2026-20857High7.876%-
CVE-2026-20858High7.876%-
CVE-2026-20859High7.876%-
CVE-2026-20860High7.876%-
CVE-2026-20864High7.876%-
CVE-2026-20865High7.876%-
CVE-2026-20877High7.876%-
CVE-2026-20918High7.876%-
CVE-2026-20922High7.876%-
CVE-2026-20923High7.876%-
CVE-2026-20924High7.876%-
CVE-2026-20843High7.876%-
CVE-2026-20861High7.876%-
CVE-2026-20866High7.876%-
CVE-2026-20867High7.876%-
CVE-2026-20870High7.876%-
CVE-2026-20871High7.876%-
CVE-2026-20873High7.876%-
CVE-2026-20874High7.876%-
CVE-2024-55414High7.876%-
CVE-2026-20941High7.876%-
CVE-2026-20920High7.876%-
CVE-2026-20938High7.876%-
CVE-2026-20940High7.876%-
CVE-2026-20810High7.876%-
CVE-2026-32170Medium6.780%-
CVE-2026-41097Medium6.780%-
CVE-2026-21530Medium6.780%-
CVE-2026-20804High7.776%-
CVE-2026-20852High7.776%-
CVE-2026-32091High8.473%-
CVE-2026-32162High8.473%-
CVE-2026-32221High8.473%-
CVE-2026-34350Medium6.580%-
CVE-2026-35422Medium6.580%-
CVE-2026-0386High7.576%-
CVE-2026-20875High7.576%-
CVE-2026-20919High7.576%-
CVE-2026-20921High7.576%-
CVE-2026-20926High7.576%-
CVE-2026-20934High7.576%-
CVE-2026-20848High7.576%-
CVE-2026-20849High7.576%-
CVE-2026-20854High7.576%-
CVE-2026-20929High7.576%-
CVE-2026-20844High7.476%-
CVE-2026-20853High7.476%-
CVE-2026-33827High8.173%-
CVE-2026-40380Medium6.280%-
CVE-2026-27912High8.073%-
CVE-2026-33826High8.073%-
CVE-2026-20808High7.076%-
CVE-2026-20814High7.076%-
CVE-2026-20815High7.076%-
CVE-2026-20836High7.076%-
CVE-2026-20842High7.076%-
CVE-2026-20869High7.076%-
CVE-2026-20830High7.076%-
CVE-2026-21221High7.076%-
CVE-2026-20863High7.076%-
CVE-2026-20930High7.873%-
CVE-2026-26153High7.873%-
CVE-2026-26156High7.873%-
CVE-2026-26159High7.873%-
CVE-2026-26160High7.873%-
CVE-2026-26161High7.873%-
CVE-2026-26162High7.873%-
CVE-2026-26163High7.873%-
CVE-2026-26168High7.873%-
CVE-2026-26170High7.873%-
CVE-2026-26172High7.873%-
CVE-2026-26176High7.873%-
CVE-2026-26179High7.873%-
CVE-2026-26180High7.873%-
CVE-2026-26181High7.873%-
CVE-2026-26183High7.873%-
CVE-2026-26184High7.873%-
CVE-2026-27907High7.873%-
CVE-2026-27909High7.873%-
CVE-2026-27910High7.873%-
CVE-2026-27911High7.873%-
CVE-2026-27914High7.873%-
CVE-2026-27915High7.873%-
CVE-2026-27916High7.873%-
CVE-2026-27918High7.873%-
CVE-2026-27919High7.873%-
CVE-2026-27920High7.873%-
CVE-2026-27923High7.873%-
CVE-2026-27927High7.873%-
CVE-2026-32069High7.873%-
CVE-2026-32074High7.873%-
CVE-2026-32076High7.873%-
CVE-2026-32077High7.873%-
CVE-2026-32078High7.873%-
CVE-2026-32089High7.873%-
CVE-2026-32090High7.873%-
CVE-2026-32152High7.873%-
CVE-2026-32154High7.873%-
CVE-2026-32155High7.873%-
CVE-2026-32158High7.873%-
CVE-2026-32159High7.873%-
CVE-2026-32160High7.873%-
CVE-2026-32163High7.873%-
CVE-2026-32164High7.873%-
CVE-2026-32165High7.873%-
CVE-2026-32183High7.873%-
CVE-2026-32222High7.873%-
CVE-2026-33098High7.873%-
CVE-2026-33101High7.873%-
CVE-2026-32153High7.873%-
CVE-2026-20876Medium6.776%-
CVE-2026-26154High7.573%-
CVE-2026-32071High7.573%-
CVE-2026-33096High7.573%-
CVE-2026-32156High7.473%-
CVE-2026-48566Medium5.580%-
CVE-2026-35419Medium5.580%-
CVE-2026-34339Medium5.580%-
CVE-2026-20812Medium6.576%-
CVE-2026-20847Medium6.576%-
CVE-2026-20925Medium6.576%-
CVE-2026-20872Medium6.576%-
CVE-2026-32149High7.373%-
CVE-2026-35423Medium5.480%-
CVE-2026-21265Medium6.476%-
CVE-2026-26151High7.173%-
CVE-2025-64720High7.173%-
CVE-2025-65018High7.173%-
CVE-2026-20818Medium6.276%-
CVE-2026-20821Medium6.276%-
CVE-2026-20851Medium6.276%-
CVE-2026-20935Medium6.276%-
CVE-2026-25184High7.073%-
CVE-2026-26152High7.073%-
CVE-2026-26165High7.073%-
CVE-2026-26166High7.073%-
CVE-2026-26173High7.073%-
CVE-2026-26174High7.073%-
CVE-2026-26177High7.073%-
CVE-2026-26182High7.073%-
CVE-2026-27908High7.073%-
CVE-2026-27917High7.073%-
CVE-2026-27921High7.073%-
CVE-2026-27922High7.073%-
CVE-2026-27926High7.073%-
CVE-2026-27929High7.073%-
CVE-2026-32068High7.073%-
CVE-2026-32070High7.073%-
CVE-2026-32073High7.073%-
CVE-2026-32075High7.073%-
CVE-2026-32080High7.073%-
CVE-2026-32082High7.073%-
CVE-2026-32083High7.073%-
CVE-2026-32086High7.073%-
CVE-2026-32087High7.073%-
CVE-2026-32093High7.073%-

Showing the 250 highest-risk of 373 CVEs. See all in the CVE reference.

Updates (KBs) for Windows 11 Version 25H2

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50720142025-12-09High8.84.6%33KEVRansomware
KB50720332025-12-09High8.84.6%34KEVRansomware
KB50733792026-01-13Critical9.876%86KEV
KB50734502026-01-13Critical9.876%80KEV
KB50734552026-01-13Critical9.876%80KEV
KB50734572026-01-13Critical9.876%78KEV
KB50737232026-01-13Critical9.876%73KEV
KB50737242026-01-13Critical9.876%73KEV
KB50741092026-01-13Critical9.876%86KEV
KB50820632026-04-14Critical9.873%124KEV
KB50837692026-04-14Critical9.873%121KEV
KB50668722025-10-14High8.86.3%37KEV
KB50668732025-10-14High8.86.3%50KEV
KB50668742025-10-14High8.86.3%34KEV
KB50668752025-10-14High8.86.3%46KEV
KB50668762025-10-14High8.86.3%37KEV
KB50668772025-10-14High8.86.3%34KEV
KB50714132025-12-09High8.82.4%28KEV
KB50714172025-12-09High8.82.4%30KEV
KB50715422025-12-09High8.82.4%30KEV
KB50715442025-12-09High8.82.4%26KEV
KB50715462025-12-09High8.82.4%28KEV
KB50715472025-12-09High8.82.4%29KEV
KB50874232026-06-09Critical9.880%66-
KB50875392026-06-09Critical9.880%66-
KB50894662026-06-09Critical9.84.7%61-
KB50895492026-06-09Critical9.84.7%61-
KB50668402025-10-14High8.81.8%3-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5099540: the full CVE list KB5099538: patch details KB5094123: the full CVE list KB5099539 install notes and severity CVE-2026-53412 exploit status KB5101650 download and what it fixes KB5120708 install notes and severity CVE-2026-55040 exploit status KB5101001: patch details KB5094128: the full CVE list
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.