Patch tracker / Products / Windows 11 Version 25H2

Windows 11 Version 25H2: vulnerabilities and security updates

Every CVE affecting Windows 11 Version 25H2 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
246
Updates (KBs)
26
Actively exploited (KEV)
6
Critical Severity
10

CVEs affecting Windows 11 Version 25H2

CVESeverityCVSSEPSSStatus
CVE-2025-60710High7.84.6%KEVRansomware
CVE-2026-20805Medium5.575%KEV
CVE-2025-24990High7.86.0%KEV
CVE-2025-59230High7.86.0%KEV
CVE-2025-62221High7.84.6%KEV
CVE-2025-47827Medium4.66.0%KEV
CVE-2026-41089Critical9.880%-
CVE-2026-41096Critical9.880%-
CVE-2026-32209Critical9.880%-
CVE-2025-54518Critical9.880%-
CVE-2026-34329High8.880%-
CVE-2026-40403High8.880%-
CVE-2026-20962Critical9.875%-
CVE-2026-20825Critical9.875%-
CVE-2026-20936Critical9.875%-
CVE-2025-6965Critical9.875%-
CVE-2026-40415High8.180%-
CVE-2026-34332High8.080%-
CVE-2026-33834High7.880%-
CVE-2026-34330High7.880%-
CVE-2026-34333High7.880%-
CVE-2026-34343High7.880%-
CVE-2026-34344High7.880%-
CVE-2026-34351High7.880%-
CVE-2026-35415High7.880%-
CVE-2026-35417High7.880%-
CVE-2026-35418High7.880%-
CVE-2026-35420High7.880%-
CVE-2026-35421High7.880%-
CVE-2026-40377High7.880%-
CVE-2026-40399High7.880%-
CVE-2026-40407High7.880%-
CVE-2026-40408High7.880%-
CVE-2026-41088High7.880%-
CVE-2026-41095High7.880%-
CVE-2026-42896High7.880%-
CVE-2026-33835High7.880%-
CVE-2026-33837High7.880%-
CVE-2026-33838High7.880%-
CVE-2026-34334High7.880%-
CVE-2026-34336High7.880%-
CVE-2026-34337High7.880%-
CVE-2026-34338High7.880%-
CVE-2026-40369High7.880%-
CVE-2026-40382High7.880%-
CVE-2026-40397High7.880%-
CVE-2026-40398High7.880%-
CVE-2026-33841High7.880%-
CVE-2026-33840High7.880%-
CVE-2026-20868High8.875%-
CVE-2026-35424High7.580%-
CVE-2026-40405High7.580%-
CVE-2026-40406High7.580%-
CVE-2026-32161High7.580%-
CVE-2026-40414High7.480%-
CVE-2026-40413High7.480%-
CVE-2026-40401High7.180%-
CVE-2026-33839High7.080%-
CVE-2026-34331High7.080%-
CVE-2026-34342High7.080%-
CVE-2026-34345High7.080%-
CVE-2026-34347High7.080%-
CVE-2026-35416High7.080%-
CVE-2026-40410High7.080%-
CVE-2026-42825High7.080%-
CVE-2026-34340High7.080%-
CVE-2026-34341High7.080%-
CVE-2026-20856High8.175%-
CVE-2026-20931High8.075%-
CVE-2026-32170Medium6.780%-
CVE-2026-41097Medium6.780%-
CVE-2026-21530Medium6.780%-
CVE-2026-20809High7.875%-
CVE-2026-20811High7.875%-
CVE-2026-20816High7.875%-
CVE-2026-20817High7.875%-
CVE-2026-20820High7.875%-
CVE-2026-20822High7.875%-
CVE-2026-20826High7.875%-
CVE-2026-20831High7.875%-
CVE-2026-20832High7.875%-
CVE-2026-20837High7.875%-
CVE-2026-20840High7.875%-
CVE-2023-31096High7.875%-
CVE-2026-20857High7.875%-
CVE-2026-20858High7.875%-
CVE-2026-20859High7.875%-
CVE-2026-20860High7.875%-
CVE-2026-20864High7.875%-
CVE-2026-20865High7.875%-
CVE-2026-20877High7.875%-
CVE-2026-20918High7.875%-
CVE-2026-20922High7.875%-
CVE-2026-20923High7.875%-
CVE-2026-20924High7.875%-
CVE-2026-20843High7.875%-
CVE-2026-20861High7.875%-
CVE-2026-20866High7.875%-
CVE-2026-20867High7.875%-
CVE-2026-20870High7.875%-
CVE-2026-20871High7.875%-
CVE-2026-20873High7.875%-
CVE-2026-20874High7.875%-
CVE-2024-55414High7.875%-
CVE-2026-20941High7.875%-
CVE-2026-20920High7.875%-
CVE-2026-20938High7.875%-
CVE-2026-20940High7.875%-
CVE-2026-20810High7.875%-
CVE-2026-34350Medium6.580%-
CVE-2026-35422Medium6.580%-
CVE-2026-20804High7.775%-
CVE-2026-20852High7.775%-
CVE-2026-0386High7.575%-
CVE-2026-20875High7.575%-
CVE-2026-20919High7.575%-
CVE-2026-20921High7.575%-
CVE-2026-20926High7.575%-
CVE-2026-20934High7.575%-
CVE-2026-20848High7.575%-
CVE-2026-20849High7.575%-
CVE-2026-20854High7.575%-
CVE-2026-20929High7.575%-
CVE-2026-40380Medium6.280%-
CVE-2026-20844High7.475%-
CVE-2026-20853High7.475%-
CVE-2026-20808High7.075%-
CVE-2026-20814High7.075%-
CVE-2026-20815High7.075%-
CVE-2026-20836High7.075%-
CVE-2026-20842High7.075%-
CVE-2026-20869High7.075%-
CVE-2026-20830High7.075%-
CVE-2026-21221High7.075%-
CVE-2026-20863High7.075%-
CVE-2026-48566Medium5.580%-
CVE-2026-35419Medium5.580%-
CVE-2026-34339Medium5.580%-
CVE-2026-20876Medium6.775%-
CVE-2026-35423Medium5.480%-
CVE-2026-20812Medium6.575%-
CVE-2026-20847Medium6.575%-
CVE-2026-20925Medium6.575%-
CVE-2026-20872Medium6.575%-
CVE-2026-21265Medium6.475%-
CVE-2026-20818Medium6.275%-
CVE-2026-20821Medium6.275%-
CVE-2026-20851Medium6.275%-
CVE-2026-20935Medium6.275%-
CVE-2026-20823Medium5.575%-
CVE-2026-20824Medium5.575%-
CVE-2026-20827Medium5.575%-
CVE-2026-20829Medium5.575%-
CVE-2026-20833Medium5.575%-
CVE-2026-20835Medium5.575%-
CVE-2026-20838Medium5.575%-
CVE-2026-20839Medium5.575%-
CVE-2026-20932Medium5.575%-
CVE-2026-20862Medium5.575%-
CVE-2026-20937Medium5.575%-
CVE-2026-20939Medium5.575%-
CVE-2026-20819Medium5.575%-
CVE-2026-20927Medium5.375%-
CVE-2026-20828Medium4.675%-
CVE-2026-20834Medium4.675%-
CVE-2025-59280Critical9.96.0%-
CVE-2016-9535Critical9.96.0%-
CVE-2025-59295High8.86.0%-
CVE-2025-58718High8.86.0%-
CVE-2025-62456High8.84.6%-
CVE-2025-62549High8.84.6%-
CVE-2025-24052High7.86.0%-
CVE-2025-55701High7.86.0%-
CVE-2025-59201High7.86.0%-
CVE-2025-59242High7.86.0%-
CVE-2025-59277High7.86.0%-
CVE-2025-58714High7.86.0%-
CVE-2025-59187High7.86.0%-
CVE-2025-59275High7.86.0%-
CVE-2025-59278High7.86.0%-
CVE-2025-55692High7.86.0%-
CVE-2025-58726High7.56.0%-
CVE-2025-62454High7.84.6%-
CVE-2025-62457High7.84.6%-
CVE-2025-62466High7.84.6%-
CVE-2025-62470High7.84.6%-
CVE-2025-62472High7.84.6%-
CVE-2025-62571High7.84.6%-
CVE-2025-64673High7.84.6%-
CVE-2025-59516High7.84.6%-
CVE-2025-59517High7.84.6%-
CVE-2025-62461High7.84.6%-
CVE-2025-62462High7.84.6%-
CVE-2025-62464High7.84.6%-
CVE-2025-55233High7.84.6%-
CVE-2025-62467High7.84.6%-
CVE-2025-62474High7.84.6%-
CVE-2025-64661High7.84.6%-
CVE-2025-54100High7.84.6%-
CVE-2025-62572High7.84.6%-
CVE-2025-55335High7.46.0%-
CVE-2025-55687High7.46.0%-
CVE-2025-25004High7.36.0%-
CVE-2025-64658High7.54.6%-
CVE-2025-59208High7.16.0%-
CVE-2025-58732High7.06.0%-
CVE-2025-58735High7.06.0%-
CVE-2025-59196High7.06.0%-
CVE-2025-59282High7.06.0%-
CVE-2025-55678High7.06.0%-
CVE-2025-58725High7.06.0%-
CVE-2025-58730High7.06.0%-
CVE-2025-58733High7.06.0%-
CVE-2025-58736High7.06.0%-
CVE-2025-59205High7.06.0%-
CVE-2025-59202High7.06.0%-
CVE-2025-58737High7.06.0%-
CVE-2025-62565High7.34.6%-
CVE-2025-62458High7.82.4%-
CVE-2025-62455High7.82.4%-
CVE-2025-62570High7.14.6%-
CVE-2025-62573High7.04.6%-
CVE-2025-62569High7.04.6%-
CVE-2025-62469High7.04.6%-
CVE-2025-58739Medium6.56.0%-
CVE-2025-55700Medium6.56.0%-
CVE-2025-58717Medium6.56.0%-
CVE-2025-58729Medium6.56.0%-
CVE-2025-59214Medium6.56.0%-
CVE-2025-59185Medium6.56.0%-
CVE-2025-59259Medium6.56.0%-
CVE-2025-59244Medium6.56.0%-
CVE-2025-59258Medium6.26.0%-
CVE-2025-62473Medium6.54.6%-
CVE-2025-64670Medium6.54.6%-
CVE-2025-62463Medium6.54.6%-
CVE-2025-62465Medium6.54.6%-
CVE-2025-55695Medium5.56.0%-
CVE-2025-59190Medium5.56.0%-
CVE-2025-59211Medium5.56.0%-
CVE-2025-59188Medium5.56.0%-
CVE-2025-59209Medium5.56.0%-
CVE-2025-59253Medium5.56.0%-
CVE-2025-62468Medium5.54.6%-
CVE-2025-59198Medium5.06.0%-
CVE-2025-62567Medium5.34.6%-

Updates (KBs) for Windows 11 Version 25H2

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50720142025-12-09High8.84.6%33KEVRansomware
KB50720332025-12-09High8.84.6%34KEVRansomware
KB50733792026-01-13Critical9.875%86KEV
KB50734502026-01-13Critical9.875%80KEV
KB50734552026-01-13Critical9.875%80KEV
KB50734572026-01-13Critical9.875%78KEV
KB50737232026-01-13Critical9.875%73KEV
KB50737242026-01-13Critical9.875%73KEV
KB50741092026-01-13Critical9.875%86KEV
KB50668722025-10-14High8.86.0%37KEV
KB50668732025-10-14High8.86.0%50KEV
KB50668742025-10-14High8.86.0%34KEV
KB50668752025-10-14High8.86.0%46KEV
KB50668762025-10-14High8.86.0%37KEV
KB50668772025-10-14High8.86.0%34KEV
KB50714132025-12-09High8.82.4%28KEV
KB50714172025-12-09High8.82.4%30KEV
KB50715422025-12-09High8.82.4%30KEV
KB50715442025-12-09High8.82.4%26KEV
KB50715462025-12-09High8.82.4%28KEV
KB50715472025-12-09High8.82.4%29KEV
KB50874232026-06-09Critical9.880%66-
KB50875392026-06-09Critical9.880%66-
KB50894662026-06-09Critical9.84.7%61-
KB50895492026-06-09Critical9.84.7%61-
KB50668402025-10-14High8.81.8%3-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.