Patch tracker / Products / Windows 11 Version 25H2
Windows 11 Version 25H2: vulnerabilities and security updates
Every CVE affecting Windows 11 Version 25H2 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.
CVEs
246
Updates (KBs)
26
Actively exploited (KEV)
6
Critical Severity
210
CVEs affecting Windows 11 Version 25H2
| CVE | Severity | CVSS | EPSS | Status |
|---|---|---|---|---|
| CVE-2026-20805 | Critical | 9.8 | 75% | KEV |
| CVE-2025-24990 | Critical | 9.9 | 6.0% | KEV |
| CVE-2025-59230 | Critical | 9.9 | 6.0% | KEV |
| CVE-2025-47827 | Critical | 9.9 | 6.0% | KEV |
| CVE-2025-62221 | High | 8.8 | 4.7% | KEV |
| CVE-2025-60710 | High | 8.8 | 4.7% | KEV |
| CVE-2026-48566 | Critical | 9.8 | 80% | - |
| CVE-2026-33834 | Critical | 9.8 | 80% | - |
| CVE-2026-33839 | Critical | 9.8 | 80% | - |
| CVE-2026-34329 | Critical | 9.8 | 80% | - |
| CVE-2026-34330 | Critical | 9.8 | 80% | - |
| CVE-2026-34331 | Critical | 9.8 | 80% | - |
| CVE-2026-34333 | Critical | 9.8 | 80% | - |
| CVE-2026-34342 | Critical | 9.8 | 80% | - |
| CVE-2026-34343 | Critical | 9.8 | 80% | - |
| CVE-2026-34344 | Critical | 9.8 | 80% | - |
| CVE-2026-34345 | Critical | 9.8 | 80% | - |
| CVE-2026-34347 | Critical | 9.8 | 80% | - |
| CVE-2026-34350 | Critical | 9.8 | 80% | - |
| CVE-2026-34351 | Critical | 9.8 | 80% | - |
| CVE-2026-35415 | Critical | 9.8 | 80% | - |
| CVE-2026-35416 | Critical | 9.8 | 80% | - |
| CVE-2026-35417 | Critical | 9.8 | 80% | - |
| CVE-2026-35418 | Critical | 9.8 | 80% | - |
| CVE-2026-35419 | Critical | 9.8 | 80% | - |
| CVE-2026-35420 | Critical | 9.8 | 80% | - |
| CVE-2026-35421 | Critical | 9.8 | 80% | - |
| CVE-2026-35422 | Critical | 9.8 | 80% | - |
| CVE-2026-35423 | Critical | 9.8 | 80% | - |
| CVE-2026-35424 | Critical | 9.8 | 80% | - |
| CVE-2026-40377 | Critical | 9.8 | 80% | - |
| CVE-2026-40380 | Critical | 9.8 | 80% | - |
| CVE-2026-40399 | Critical | 9.8 | 80% | - |
| CVE-2026-40405 | Critical | 9.8 | 80% | - |
| CVE-2026-40406 | Critical | 9.8 | 80% | - |
| CVE-2026-40407 | Critical | 9.8 | 80% | - |
| CVE-2026-40408 | Critical | 9.8 | 80% | - |
| CVE-2026-40410 | Critical | 9.8 | 80% | - |
| CVE-2026-40414 | Critical | 9.8 | 80% | - |
| CVE-2026-40415 | Critical | 9.8 | 80% | - |
| CVE-2026-41088 | Critical | 9.8 | 80% | - |
| CVE-2026-41089 | Critical | 9.8 | 80% | - |
| CVE-2026-41095 | Critical | 9.8 | 80% | - |
| CVE-2026-41096 | Critical | 9.8 | 80% | - |
| CVE-2026-32161 | Critical | 9.8 | 80% | - |
| CVE-2026-32170 | Critical | 9.8 | 80% | - |
| CVE-2026-42825 | Critical | 9.8 | 80% | - |
| CVE-2026-42896 | Critical | 9.8 | 80% | - |
| CVE-2026-33835 | Critical | 9.8 | 80% | - |
| CVE-2026-33837 | Critical | 9.8 | 80% | - |
| CVE-2026-33838 | Critical | 9.8 | 80% | - |
| CVE-2026-34332 | Critical | 9.8 | 80% | - |
| CVE-2026-34334 | Critical | 9.8 | 80% | - |
| CVE-2026-34336 | Critical | 9.8 | 80% | - |
| CVE-2026-34337 | Critical | 9.8 | 80% | - |
| CVE-2026-34338 | Critical | 9.8 | 80% | - |
| CVE-2026-34339 | Critical | 9.8 | 80% | - |
| CVE-2026-34340 | Critical | 9.8 | 80% | - |
| CVE-2026-34341 | Critical | 9.8 | 80% | - |
| CVE-2026-40369 | Critical | 9.8 | 80% | - |
| CVE-2026-40382 | Critical | 9.8 | 80% | - |
| CVE-2026-40397 | Critical | 9.8 | 80% | - |
| CVE-2026-32209 | Critical | 9.8 | 80% | - |
| CVE-2026-40398 | Critical | 9.8 | 80% | - |
| CVE-2026-40401 | Critical | 9.8 | 80% | - |
| CVE-2026-40403 | Critical | 9.8 | 80% | - |
| CVE-2026-40413 | Critical | 9.8 | 80% | - |
| CVE-2026-41097 | Critical | 9.8 | 80% | - |
| CVE-2025-54518 | Critical | 9.8 | 80% | - |
| CVE-2026-21530 | Critical | 9.8 | 80% | - |
| CVE-2026-33841 | Critical | 9.8 | 80% | - |
| CVE-2026-33840 | Critical | 9.8 | 80% | - |
| CVE-2026-20962 | Critical | 9.8 | 75% | - |
| CVE-2026-21265 | Critical | 9.8 | 75% | - |
| CVE-2026-0386 | Critical | 9.8 | 75% | - |
| CVE-2026-20804 | Critical | 9.8 | 75% | - |
| CVE-2026-20808 | Critical | 9.8 | 75% | - |
| CVE-2026-20809 | Critical | 9.8 | 75% | - |
| CVE-2026-20811 | Critical | 9.8 | 75% | - |
| CVE-2026-20812 | Critical | 9.8 | 75% | - |
| CVE-2026-20814 | Critical | 9.8 | 75% | - |
| CVE-2026-20815 | Critical | 9.8 | 75% | - |
| CVE-2026-20816 | Critical | 9.8 | 75% | - |
| CVE-2026-20817 | Critical | 9.8 | 75% | - |
| CVE-2026-20818 | Critical | 9.8 | 75% | - |
| CVE-2026-20820 | Critical | 9.8 | 75% | - |
| CVE-2026-20821 | Critical | 9.8 | 75% | - |
| CVE-2026-20822 | Critical | 9.8 | 75% | - |
| CVE-2026-20823 | Critical | 9.8 | 75% | - |
| CVE-2026-20824 | Critical | 9.8 | 75% | - |
| CVE-2026-20825 | Critical | 9.8 | 75% | - |
| CVE-2026-20826 | Critical | 9.8 | 75% | - |
| CVE-2026-20827 | Critical | 9.8 | 75% | - |
| CVE-2026-20828 | Critical | 9.8 | 75% | - |
| CVE-2026-20829 | Critical | 9.8 | 75% | - |
| CVE-2026-20831 | Critical | 9.8 | 75% | - |
| CVE-2026-20832 | Critical | 9.8 | 75% | - |
| CVE-2026-20833 | Critical | 9.8 | 75% | - |
| CVE-2026-20834 | Critical | 9.8 | 75% | - |
| CVE-2026-20835 | Critical | 9.8 | 75% | - |
| CVE-2026-20836 | Critical | 9.8 | 75% | - |
| CVE-2026-20837 | Critical | 9.8 | 75% | - |
| CVE-2026-20838 | Critical | 9.8 | 75% | - |
| CVE-2026-20839 | Critical | 9.8 | 75% | - |
| CVE-2026-20840 | Critical | 9.8 | 75% | - |
| CVE-2026-20842 | Critical | 9.8 | 75% | - |
| CVE-2026-20844 | Critical | 9.8 | 75% | - |
| CVE-2023-31096 | Critical | 9.8 | 75% | - |
| CVE-2026-20847 | Critical | 9.8 | 75% | - |
| CVE-2026-20851 | Critical | 9.8 | 75% | - |
| CVE-2026-20852 | Critical | 9.8 | 75% | - |
| CVE-2026-20856 | Critical | 9.8 | 75% | - |
| CVE-2026-20857 | Critical | 9.8 | 75% | - |
| CVE-2026-20858 | Critical | 9.8 | 75% | - |
| CVE-2026-20859 | Critical | 9.8 | 75% | - |
| CVE-2026-20860 | Critical | 9.8 | 75% | - |
| CVE-2026-20864 | Critical | 9.8 | 75% | - |
| CVE-2026-20865 | Critical | 9.8 | 75% | - |
| CVE-2026-20869 | Critical | 9.8 | 75% | - |
| CVE-2026-20875 | Critical | 9.8 | 75% | - |
| CVE-2026-20876 | Critical | 9.8 | 75% | - |
| CVE-2026-20877 | Critical | 9.8 | 75% | - |
| CVE-2026-20918 | Critical | 9.8 | 75% | - |
| CVE-2026-20919 | Critical | 9.8 | 75% | - |
| CVE-2026-20921 | Critical | 9.8 | 75% | - |
| CVE-2026-20922 | Critical | 9.8 | 75% | - |
| CVE-2026-20923 | Critical | 9.8 | 75% | - |
| CVE-2026-20924 | Critical | 9.8 | 75% | - |
| CVE-2026-20925 | Critical | 9.8 | 75% | - |
| CVE-2026-20926 | Critical | 9.8 | 75% | - |
| CVE-2026-20927 | Critical | 9.8 | 75% | - |
| CVE-2026-20932 | Critical | 9.8 | 75% | - |
| CVE-2026-20934 | Critical | 9.8 | 75% | - |
| CVE-2026-20830 | Critical | 9.8 | 75% | - |
| CVE-2026-21221 | Critical | 9.8 | 75% | - |
| CVE-2026-20843 | Critical | 9.8 | 75% | - |
| CVE-2026-20848 | Critical | 9.8 | 75% | - |
| CVE-2026-20849 | Critical | 9.8 | 75% | - |
| CVE-2026-20854 | Critical | 9.8 | 75% | - |
| CVE-2026-20861 | Critical | 9.8 | 75% | - |
| CVE-2026-20862 | Critical | 9.8 | 75% | - |
| CVE-2026-20863 | Critical | 9.8 | 75% | - |
| CVE-2026-20866 | Critical | 9.8 | 75% | - |
| CVE-2026-20867 | Critical | 9.8 | 75% | - |
| CVE-2026-20868 | Critical | 9.8 | 75% | - |
| CVE-2026-20870 | Critical | 9.8 | 75% | - |
| CVE-2026-20871 | Critical | 9.8 | 75% | - |
| CVE-2026-20872 | Critical | 9.8 | 75% | - |
| CVE-2026-20873 | Critical | 9.8 | 75% | - |
| CVE-2026-20874 | Critical | 9.8 | 75% | - |
| CVE-2024-55414 | Critical | 9.8 | 75% | - |
| CVE-2026-20931 | Critical | 9.8 | 75% | - |
| CVE-2026-20936 | Critical | 9.8 | 75% | - |
| CVE-2026-20937 | Critical | 9.8 | 75% | - |
| CVE-2026-20939 | Critical | 9.8 | 75% | - |
| CVE-2026-20941 | Critical | 9.8 | 75% | - |
| CVE-2025-6965 | Critical | 9.8 | 75% | - |
| CVE-2026-20920 | Critical | 9.8 | 75% | - |
| CVE-2026-20929 | Critical | 9.8 | 75% | - |
| CVE-2026-20819 | Critical | 9.8 | 75% | - |
| CVE-2026-20938 | Critical | 9.8 | 75% | - |
| CVE-2026-20940 | Critical | 9.8 | 75% | - |
| CVE-2026-20853 | Critical | 9.8 | 75% | - |
| CVE-2026-20935 | Critical | 9.8 | 75% | - |
| CVE-2026-20810 | Critical | 9.8 | 75% | - |
| CVE-2025-59295 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58739 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59208 | Critical | 9.9 | 6.0% | - |
| CVE-2025-24052 | Critical | 9.9 | 6.0% | - |
| CVE-2025-55335 | Critical | 9.9 | 6.0% | - |
| CVE-2025-55700 | Critical | 9.9 | 6.0% | - |
| CVE-2025-55701 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58717 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58732 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58735 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59196 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59201 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59242 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59277 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59280 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59282 | Critical | 9.9 | 6.0% | - |
| CVE-2016-9535 | Critical | 9.9 | 6.0% | - |
| CVE-2025-25004 | Critical | 9.9 | 6.0% | - |
| CVE-2025-55678 | Critical | 9.9 | 6.0% | - |
| CVE-2025-55695 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58714 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58718 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58725 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58726 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58729 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58730 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58733 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58736 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59187 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59190 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59198 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59205 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59214 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59275 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59278 | Critical | 9.9 | 6.0% | - |
| CVE-2025-55687 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59185 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59202 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59211 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59258 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59259 | Critical | 9.9 | 6.0% | - |
| CVE-2025-55692 | Critical | 9.9 | 6.0% | - |
| CVE-2025-58737 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59188 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59209 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59244 | Critical | 9.9 | 6.0% | - |
| CVE-2025-59253 | Critical | 9.9 | 6.0% | - |
| CVE-2025-62454 | High | 8.8 | 4.7% | - |
| CVE-2025-62456 | High | 8.8 | 4.7% | - |
| CVE-2025-62457 | High | 8.8 | 4.7% | - |
| CVE-2025-62466 | High | 8.8 | 4.7% | - |
| CVE-2025-62470 | High | 8.8 | 4.7% | - |
| CVE-2025-62472 | High | 8.8 | 4.7% | - |
| CVE-2025-62473 | High | 8.8 | 4.7% | - |
| CVE-2025-62549 | High | 8.8 | 4.7% | - |
| CVE-2025-62571 | High | 8.8 | 4.7% | - |
| CVE-2025-62573 | High | 8.8 | 4.7% | - |
| CVE-2025-64658 | High | 8.8 | 4.7% | - |
| CVE-2025-64670 | High | 8.8 | 4.7% | - |
| CVE-2025-64673 | High | 8.8 | 4.7% | - |
| CVE-2025-59516 | High | 8.8 | 4.7% | - |
| CVE-2025-59517 | High | 8.8 | 4.7% | - |
| CVE-2025-62461 | High | 8.8 | 4.7% | - |
| CVE-2025-62462 | High | 8.8 | 4.7% | - |
| CVE-2025-62463 | High | 8.8 | 4.7% | - |
| CVE-2025-62464 | High | 8.8 | 4.7% | - |
| CVE-2025-62465 | High | 8.8 | 4.7% | - |
| CVE-2025-55233 | High | 8.8 | 4.7% | - |
| CVE-2025-62467 | High | 8.8 | 4.7% | - |
| CVE-2025-62474 | High | 8.8 | 4.7% | - |
| CVE-2025-62567 | High | 8.8 | 4.7% | - |
| CVE-2025-62565 | High | 8.8 | 4.7% | - |
| CVE-2025-64661 | High | 8.8 | 4.7% | - |
| CVE-2025-62468 | High | 8.8 | 4.7% | - |
| CVE-2025-54100 | High | 8.8 | 4.7% | - |
| CVE-2025-62569 | High | 8.8 | 4.7% | - |
| CVE-2025-62469 | High | 8.8 | 4.7% | - |
| CVE-2025-62572 | High | 8.8 | 4.7% | - |
| CVE-2025-62570 | High | 8.8 | 4.7% | - |
| CVE-2025-62458 | High | 8.8 | 2.4% | - |
| CVE-2025-62455 | High | 8.8 | 2.4% | - |
Updates (KBs) for Windows 11 Version 25H2
| Update | Released | Severity | CVSS | EPSS | CVEs | Status |
|---|---|---|---|---|---|---|
| KB5073379 | 2026-01-13 | Critical | 9.8 | 75% | 86 | KEV |
| KB5073450 | 2026-01-13 | Critical | 9.8 | 75% | 80 | KEV |
| KB5073455 | 2026-01-13 | Critical | 9.8 | 75% | 80 | KEV |
| KB5073457 | 2026-01-13 | Critical | 9.8 | 75% | 78 | KEV |
| KB5073723 | 2026-01-13 | Critical | 9.8 | 75% | 73 | KEV |
| KB5073724 | 2026-01-13 | Critical | 9.8 | 75% | 73 | KEV |
| KB5074109 | 2026-01-13 | Critical | 9.8 | 75% | 86 | KEV |
| KB5066872 | 2025-10-14 | High | 8.8 | 6.0% | 37 | KEV |
| KB5066873 | 2025-10-14 | High | 8.8 | 6.0% | 50 | KEV |
| KB5066874 | 2025-10-14 | High | 8.8 | 6.0% | 34 | KEV |
| KB5066875 | 2025-10-14 | High | 8.8 | 6.0% | 46 | KEV |
| KB5066876 | 2025-10-14 | High | 8.8 | 6.0% | 37 | KEV |
| KB5066877 | 2025-10-14 | High | 8.8 | 6.0% | 34 | KEV |
| KB5072014 | 2025-12-09 | High | 8.8 | 4.7% | 33 | KEV |
| KB5072033 | 2025-12-09 | High | 8.8 | 4.7% | 34 | KEV |
| KB5071413 | 2025-12-09 | High | 8.8 | 2.4% | 28 | KEV |
| KB5071417 | 2025-12-09 | High | 8.8 | 2.4% | 30 | KEV |
| KB5071542 | 2025-12-09 | High | 8.8 | 2.4% | 30 | KEV |
| KB5071544 | 2025-12-09 | High | 8.8 | 2.4% | 26 | KEV |
| KB5071546 | 2025-12-09 | High | 8.8 | 2.4% | 28 | KEV |
| KB5071547 | 2025-12-09 | High | 8.8 | 2.4% | 29 | KEV |
| KB5087423 | 2026-06-09 | Critical | 9.8 | 80% | 66 | - |
| KB5087539 | 2026-06-09 | Critical | 9.8 | 80% | 66 | - |
| KB5089466 | 2026-06-09 | Critical | 9.8 | 4.7% | 61 | - |
| KB5089549 | 2026-06-09 | Critical | 9.8 | 4.7% | 61 | - |
| KB5066840 | 2025-10-14 | High | 8.8 | 1.8% | 3 | - |
Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.
Most searched on Senserva right now
KB5099540: the full CVE list
KB5094123 download and what it fixes
KB5099538 download and what it fixes
CVE-2026-50522 patch and risk
CVE-2026-48282: how to fix it
KB5099539 download and what it fixes
KB5101001: the full CVE list
CVE-2026-55255 patch and risk
CVE-2008-4250 patch and risk
CVE-2007-3010: severity and the patch