Patch tracker / Products / Windows 11 Version 25H2

Windows 11 Version 25H2: vulnerabilities and security updates

Every CVE affecting Windows 11 Version 25H2 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
2849
Updates (KBs)
25
Actively exploited (KEV)
17
Critical Severity
87

CVEs affecting Windows 11 Version 25H2

CVESeverityCVSSEPSSStatus
CVE-2025-60710High7.84.6%KEVRansomware
CVE-2026-33824Critical9.877%KEV
CVE-2026-21513High8.861%KEV
CVE-2026-21510High8.861%KEV
CVE-2026-20805Medium5.573%KEV
CVE-2026-21519High7.861%KEV
CVE-2026-21533High7.861%KEV
CVE-2026-32202Medium4.371%KEV
CVE-2026-21525Medium6.261%KEV
CVE-2026-96951High8.89.8%KEV
CVE-2025-24990High7.86.4%KEV
CVE-2025-59230High7.86.4%KEV
CVE-2025-62221High7.84.6%KEV
CVE-2025-62215High7.06.3%KEV
CVE-2026-81963High7.82.8%KEV
CVE-2026-68820High7.01.2%KEV
CVE-2025-47827Medium4.66.4%KEV
CVE-2025-54518High9.880%-
CVE-2026-41096Critical9.880%-
CVE-2026-34329High8.880%-
CVE-2026-40403High8.880%-
CVE-2025-6965Critical9.873%-
CVE-2026-26167High8.877%-
CVE-2026-26178High8.877%-
CVE-2026-32225High8.877%-
CVE-2026-40415High8.180%-
CVE-2026-33834High7.880%-
CVE-2026-33835High7.880%-
CVE-2026-33837High7.880%-
CVE-2026-33838High7.880%-
CVE-2026-33840High7.880%-
CVE-2026-33841High7.880%-
CVE-2026-34330High7.880%-
CVE-2026-34333High7.880%-
CVE-2026-34334High7.880%-
CVE-2026-34336High7.880%-
CVE-2026-34337High7.880%-
CVE-2026-34338High7.880%-
CVE-2026-34343High7.880%-
CVE-2026-34344High7.880%-
CVE-2026-34351High7.880%-
CVE-2026-35415High7.880%-
CVE-2026-35417High7.880%-
CVE-2026-35418High7.880%-
CVE-2026-35421High7.880%-
CVE-2026-40369High7.880%-
CVE-2026-40377High7.880%-
CVE-2026-40382High7.880%-
CVE-2026-40397High7.880%-
CVE-2026-40398High7.880%-
CVE-2026-40399High7.880%-
CVE-2026-40407High7.880%-
CVE-2026-40408High7.880%-
CVE-2026-41088High7.880%-
CVE-2026-42896High7.880%-
CVE-2026-32091High8.477%-
CVE-2026-32162High8.477%-
CVE-2026-32221High8.477%-
CVE-2026-57092Critical9.971%-
CVE-2026-32161High7.580%-
CVE-2026-35424High7.580%-
CVE-2026-40405High7.580%-
CVE-2026-40406High7.580%-
CVE-2026-42990Critical9.871%-
CVE-2026-49172Critical9.871%-
CVE-2026-50447Critical9.871%-
CVE-2026-54990Critical9.871%-
CVE-2026-56188Critical9.871%-
CVE-2026-56190Critical9.871%-
CVE-2026-33827High8.177%-
CVE-2026-40413High7.480%-
CVE-2026-40414High7.480%-
CVE-2026-50380Critical9.671%-
CVE-2026-20868High8.873%-
CVE-2026-20930High7.877%-
CVE-2026-26153High7.877%-
CVE-2026-26156High7.877%-
CVE-2026-26159High7.877%-
CVE-2026-26160High7.877%-
CVE-2026-26161High7.877%-
CVE-2026-26162High7.877%-
CVE-2026-26163High7.877%-
CVE-2026-26168High7.877%-
CVE-2026-26170High7.877%-
CVE-2026-26172High7.877%-
CVE-2026-26176High7.877%-
CVE-2026-26179High7.877%-
CVE-2026-26180High7.877%-
CVE-2026-26181High7.877%-
CVE-2026-26184High7.877%-
CVE-2026-27907High7.877%-
CVE-2026-27909High7.877%-
CVE-2026-27910High7.877%-
CVE-2026-27911High7.877%-
CVE-2026-27914High7.877%-
CVE-2026-27915High7.877%-
CVE-2026-27916High7.877%-
CVE-2026-27918High7.877%-
CVE-2026-27919High7.877%-
CVE-2026-27920High7.877%-
CVE-2026-27923High7.877%-
CVE-2026-27927High7.877%-
CVE-2026-32069High7.877%-
CVE-2026-32074High7.877%-
CVE-2026-32076High7.877%-
CVE-2026-32077High7.877%-
CVE-2026-32078High7.877%-
CVE-2026-32089High7.877%-
CVE-2026-32090High7.877%-
CVE-2026-32152High7.877%-
CVE-2026-32153High7.877%-
CVE-2026-32154High7.877%-
CVE-2026-32155High7.877%-
CVE-2026-32158High7.877%-
CVE-2026-32159High7.877%-
CVE-2026-32160High7.877%-
CVE-2026-32163High7.877%-
CVE-2026-32164High7.877%-
CVE-2026-32165High7.877%-
CVE-2026-32183High7.877%-
CVE-2026-32222High7.877%-
CVE-2026-33098High7.877%-
CVE-2026-33101High7.877%-
CVE-2026-40401High7.180%-
CVE-2026-33839High7.080%-
CVE-2026-34331High7.080%-
CVE-2026-34340High7.080%-
CVE-2026-34341High7.080%-
CVE-2026-34342High7.080%-
CVE-2026-34345High7.080%-
CVE-2026-34347High7.080%-
CVE-2026-35416High7.080%-
CVE-2026-40410High7.080%-
CVE-2026-42825High7.080%-
CVE-2026-49798Critical9.371%-
CVE-2026-32071High7.577%-
CVE-2026-33096High7.577%-
CVE-2026-32156High7.477%-
CVE-2026-21530Medium6.780%-
CVE-2026-32170Medium6.780%-
CVE-2026-41097Medium6.780%-
CVE-2026-32149High7.377%-
CVE-2026-35422Medium6.580%-
CVE-2026-49178High8.871%-
CVE-2026-49795High8.871%-
CVE-2026-50342High8.871%-
CVE-2026-50360High8.871%-
CVE-2026-50369High8.871%-
CVE-2026-50382High8.871%-
CVE-2026-50385High8.871%-
CVE-2026-50398High8.871%-
CVE-2026-50413High8.871%-
CVE-2026-50474High8.871%-
CVE-2026-50477High8.871%-
CVE-2026-50489High8.871%-
CVE-2026-50666High8.871%-
CVE-2026-50670High8.871%-
CVE-2026-50687High8.871%-
CVE-2026-50692High8.871%-
CVE-2026-54107High8.871%-
CVE-2026-54982High8.871%-
CVE-2026-54999High8.871%-
CVE-2026-56194High8.871%-
CVE-2026-56647High8.871%-
CVE-2026-57087High8.871%-
CVE-2026-57090High8.871%-
CVE-2026-57094High8.871%-
CVE-2026-58534High8.871%-
CVE-2026-58594High8.871%-
CVE-2026-58608High8.871%-
CVE-2026-58626High8.871%-
CVE-2026-20856High8.173%-
CVE-2026-26151High7.177%-
CVE-2025-64720High7.177%-
CVE-2025-65018High7.177%-
CVE-2026-20931High8.073%-
CVE-2026-25184High7.077%-
CVE-2026-26152High7.077%-
CVE-2026-26165High7.077%-
CVE-2026-26166High7.077%-
CVE-2026-26173High7.077%-
CVE-2026-26174High7.077%-
CVE-2026-26177High7.077%-
CVE-2026-26182High7.077%-
CVE-2026-27908High7.077%-
CVE-2026-27917High7.077%-
CVE-2026-27921High7.077%-
CVE-2026-27922High7.077%-
CVE-2026-27926High7.077%-
CVE-2026-27929High7.077%-
CVE-2026-32068High7.077%-
CVE-2026-32070High7.077%-
CVE-2026-32073High7.077%-
CVE-2026-32075High7.077%-
CVE-2026-32082High7.077%-
CVE-2026-32083High7.077%-
CVE-2026-32086High7.077%-
CVE-2026-32087High7.077%-
CVE-2026-32093High7.077%-
CVE-2026-32150High7.077%-
CVE-2026-32219High7.077%-
CVE-2026-33099High7.077%-
CVE-2026-33100High7.077%-
CVE-2026-33104High7.077%-
CVE-2026-40380Medium6.280%-
CVE-2026-50340High8.571%-
CVE-2023-31096High7.873%-
CVE-2024-55414High7.873%-
CVE-2026-20809High7.873%-
CVE-2026-20811High7.873%-
CVE-2026-20816High7.873%-
CVE-2026-20817High7.873%-
CVE-2026-20820High7.873%-
CVE-2026-20822High7.873%-
CVE-2026-20826High7.873%-
CVE-2026-20831High7.873%-
CVE-2026-20832High7.873%-
CVE-2026-20837High7.873%-
CVE-2026-20840High7.873%-
CVE-2026-20843High7.873%-
CVE-2026-20857High7.873%-
CVE-2026-20858High7.873%-
CVE-2026-20859High7.873%-
CVE-2026-20860High7.873%-
CVE-2026-20861High7.873%-
CVE-2026-20864High7.873%-
CVE-2026-20865High7.873%-
CVE-2026-20866High7.873%-
CVE-2026-20867High7.873%-
CVE-2026-20870High7.873%-
CVE-2026-20871High7.873%-
CVE-2026-20873High7.873%-
CVE-2026-20874High7.873%-
CVE-2026-20877High7.873%-
CVE-2026-20918High7.873%-
CVE-2026-20922High7.873%-
CVE-2026-20923High7.873%-
CVE-2026-20924High7.873%-
CVE-2026-20938High7.873%-
CVE-2026-20941High7.873%-
CVE-2026-32223Medium6.877%-
CVE-2026-49184High8.471%-
CVE-2026-54122High8.471%-
CVE-2026-54128High8.471%-
CVE-2026-54992High8.471%-
CVE-2026-20804High7.773%-
CVE-2026-20852High7.773%-
CVE-2026-56181High8.371%-
CVE-2026-50429High8.271%-
CVE-2026-50680High8.271%-

Showing the 250 highest-risk of 2849 CVEs. See all in the CVE reference.

Updates (KBs) for Windows 11 Version 25H2

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50720142025-12-09High8.84.6%33KEVRansomware
KB50720332025-12-09High8.84.6%34KEVRansomware
KB50837692026-04-14Critical9.877%120KEV
KB50741092026-01-13Critical9.873%86KEV
KB51016502026-07-14Critical9.971%379KEV
KB50771812026-02-10High8.861%27KEV
KB50772122026-02-10High8.861%27KEV
KB51276482026-10-13Critical9.89.8%1009KEV
KB50668352025-10-14Critical9.96.4%134KEV
KB50688612025-11-11Critical9.86.3%35KEV
KB50689662025-11-11Critical9.86.3%35KEV
KB51240082026-09-08Critical9.82.8%625KEV
KB51209942026-08-11Critical9.81.2%190KEV
KB51210032026-08-11Critical9.81.2%190KEV
KB50941262026-06-09Critical9.857%107-
KB50894662026-05-12Critical9.84.7%61-
KB50895492026-05-12Critical9.84.7%61-
KB50794202026-03-10High8.84.9%38-
KB50794732026-03-10High8.84.9%41-
KB50742042025-12-09High7.82.2%1-
KB50845972026-03-10High8.00.9%3-
KB51232732026-08-11High7.90.2%1-
KB51236072026-08-11High7.90.2%1-
KB51291952026-08-11High7.80.3%1-
KB51292412026-08-11High7.80.3%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.