Patch tracker / Products / Windows 11 Version 25H2
Windows 11 Version 25H2: vulnerabilities and security updates
Every CVE affecting Windows 11 Version 25H2 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.
CVEs
1680
Updates (KBs)
21
Actively exploited (KEV)
12
Critical Severity
378
CVEs affecting Windows 11 Version 25H2
| CVE | Severity | CVSS | EPSS | Status |
|---|---|---|---|---|
| CVE-2025-60710 | High | 7.8 | 4.6% | KEVRansomware |
| CVE-2026-20805 | Medium | 5.5 | 71% | KEV |
| CVE-2026-21513 | High | 8.8 | 24% | KEV |
| CVE-2026-21510 | High | 8.8 | 24% | KEV |
| CVE-2026-21519 | High | 7.8 | 24% | KEV |
| CVE-2026-21533 | High | 7.8 | 24% | KEV |
| CVE-2026-21525 | Medium | 6.2 | 24% | KEV |
| CVE-2026-33824 | Critical | 9.8 | 2.0% | KEV |
| CVE-2025-62221 | High | 7.8 | 4.6% | KEV |
| CVE-2026-81963 | High | 7.8 | 2.8% | KEV |
| CVE-2026-68820 | High | 7.0 | 1.2% | KEV |
| CVE-2026-32202 | Medium | 4.3 | 4.9% | KEV |
| CVE-2026-20812 | Critical | 9.8 | 71% | - |
| CVE-2026-20819 | Critical | 9.8 | 71% | - |
| CVE-2026-20821 | Critical | 9.8 | 71% | - |
| CVE-2026-20823 | Critical | 9.8 | 71% | - |
| CVE-2026-20824 | Critical | 9.8 | 71% | - |
| CVE-2026-20825 | Critical | 9.8 | 71% | - |
| CVE-2026-20827 | Critical | 9.8 | 71% | - |
| CVE-2026-20828 | Critical | 9.8 | 71% | - |
| CVE-2026-20829 | Critical | 9.8 | 71% | - |
| CVE-2026-20834 | Critical | 9.8 | 71% | - |
| CVE-2026-20835 | Critical | 9.8 | 71% | - |
| CVE-2026-20838 | Critical | 9.8 | 71% | - |
| CVE-2026-20839 | Critical | 9.8 | 71% | - |
| CVE-2026-20847 | Critical | 9.8 | 71% | - |
| CVE-2026-20851 | Critical | 9.8 | 71% | - |
| CVE-2026-20862 | Critical | 9.8 | 71% | - |
| CVE-2026-20872 | Critical | 9.8 | 71% | - |
| CVE-2026-20876 | Critical | 9.8 | 71% | - |
| CVE-2026-20925 | Critical | 9.8 | 71% | - |
| CVE-2026-20927 | Critical | 9.8 | 71% | - |
| CVE-2026-20932 | Critical | 9.8 | 71% | - |
| CVE-2026-20935 | Critical | 9.8 | 71% | - |
| CVE-2026-20936 | Critical | 9.8 | 71% | - |
| CVE-2026-20937 | Critical | 9.8 | 71% | - |
| CVE-2026-20939 | Critical | 9.8 | 71% | - |
| CVE-2026-20962 | Critical | 9.8 | 71% | - |
| CVE-2026-21265 | Critical | 9.8 | 71% | - |
| CVE-2025-6965 | Critical | 9.8 | 71% | - |
| CVE-2026-20868 | High | 8.8 | 71% | - |
| CVE-2026-20856 | High | 8.1 | 71% | - |
| CVE-2026-20931 | High | 8.0 | 71% | - |
| CVE-2023-31096 | High | 7.8 | 71% | - |
| CVE-2024-55414 | High | 7.8 | 71% | - |
| CVE-2026-20809 | High | 7.8 | 71% | - |
| CVE-2026-20811 | High | 7.8 | 71% | - |
| CVE-2026-20816 | High | 7.8 | 71% | - |
| CVE-2026-20817 | High | 7.8 | 71% | - |
| CVE-2026-20820 | High | 7.8 | 71% | - |
| CVE-2026-20822 | High | 7.8 | 71% | - |
| CVE-2026-20826 | High | 7.8 | 71% | - |
| CVE-2026-20831 | High | 7.8 | 71% | - |
| CVE-2026-20832 | High | 7.8 | 71% | - |
| CVE-2026-20837 | High | 7.8 | 71% | - |
| CVE-2026-20840 | High | 7.8 | 71% | - |
| CVE-2026-20843 | High | 7.8 | 71% | - |
| CVE-2026-20857 | High | 7.8 | 71% | - |
| CVE-2026-20858 | High | 7.8 | 71% | - |
| CVE-2026-20859 | High | 7.8 | 71% | - |
| CVE-2026-20860 | High | 7.8 | 71% | - |
| CVE-2026-20861 | High | 7.8 | 71% | - |
| CVE-2026-20864 | High | 7.8 | 71% | - |
| CVE-2026-20865 | High | 7.8 | 71% | - |
| CVE-2026-20866 | High | 7.8 | 71% | - |
| CVE-2026-20867 | High | 7.8 | 71% | - |
| CVE-2026-20870 | High | 7.8 | 71% | - |
| CVE-2026-20871 | High | 7.8 | 71% | - |
| CVE-2026-20873 | High | 7.8 | 71% | - |
| CVE-2026-20874 | High | 7.8 | 71% | - |
| CVE-2026-20877 | High | 7.8 | 71% | - |
| CVE-2026-20918 | High | 7.8 | 71% | - |
| CVE-2026-20922 | High | 7.8 | 71% | - |
| CVE-2026-20923 | High | 7.8 | 71% | - |
| CVE-2026-20924 | High | 7.8 | 71% | - |
| CVE-2026-20938 | High | 7.8 | 71% | - |
| CVE-2026-20941 | High | 7.8 | 71% | - |
| CVE-2026-20804 | High | 7.7 | 71% | - |
| CVE-2026-20852 | High | 7.7 | 71% | - |
| CVE-2026-20848 | High | 7.5 | 71% | - |
| CVE-2026-20849 | High | 7.5 | 71% | - |
| CVE-2026-20854 | High | 7.5 | 71% | - |
| CVE-2026-20875 | High | 7.5 | 71% | - |
| CVE-2026-20919 | High | 7.5 | 71% | - |
| CVE-2026-20921 | High | 7.5 | 71% | - |
| CVE-2026-20926 | High | 7.5 | 71% | - |
| CVE-2026-20934 | High | 7.5 | 71% | - |
| CVE-2026-20844 | High | 7.4 | 71% | - |
| CVE-2026-20853 | High | 7.4 | 71% | - |
| CVE-2026-20808 | High | 7.0 | 71% | - |
| CVE-2026-20814 | High | 7.0 | 71% | - |
| CVE-2026-20815 | High | 7.0 | 71% | - |
| CVE-2026-20836 | High | 7.0 | 71% | - |
| CVE-2026-20842 | High | 7.0 | 71% | - |
| CVE-2026-20863 | High | 7.0 | 71% | - |
| CVE-2026-20869 | High | 7.0 | 71% | - |
| CVE-2026-21221 | High | 7.0 | 71% | - |
| CVE-2026-21255 | High | 8.8 | 24% | - |
| CVE-2026-21249 | High | 8.8 | 24% | - |
| CVE-2026-21222 | High | 8.8 | 24% | - |
| CVE-2026-21236 | High | 7.8 | 24% | - |
| CVE-2026-21250 | High | 7.8 | 24% | - |
| CVE-2026-21245 | High | 7.8 | 24% | - |
| CVE-2026-21240 | High | 7.8 | 24% | - |
| CVE-2026-21239 | High | 7.8 | 24% | - |
| CVE-2026-21238 | High | 7.8 | 24% | - |
| CVE-2026-21232 | High | 7.8 | 24% | - |
| CVE-2026-21231 | High | 7.8 | 24% | - |
| CVE-2026-21246 | High | 7.8 | 24% | - |
| CVE-2026-20846 | High | 7.5 | 24% | - |
| CVE-2026-21248 | High | 7.3 | 24% | - |
| CVE-2026-21247 | High | 7.3 | 24% | - |
| CVE-2026-21244 | High | 7.3 | 24% | - |
| CVE-2026-21242 | High | 7.0 | 24% | - |
| CVE-2026-21234 | High | 7.0 | 24% | - |
| CVE-2026-21508 | High | 7.0 | 24% | - |
| CVE-2026-21253 | High | 7.0 | 24% | - |
| CVE-2026-21241 | High | 7.0 | 24% | - |
| CVE-2026-21237 | High | 7.0 | 24% | - |
| CVE-2026-33842 | Critical | 9.9 | 4.9% | - |
| CVE-2026-34328 | Critical | 9.9 | 4.9% | - |
| CVE-2026-34346 | Critical | 9.9 | 4.9% | - |
| CVE-2026-34348 | Critical | 9.9 | 4.9% | - |
| CVE-2026-34349 | Critical | 9.9 | 4.9% | - |
| CVE-2026-40422 | Critical | 9.9 | 4.9% | - |
| CVE-2026-41087 | Critical | 9.9 | 4.9% | - |
| CVE-2026-44806 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49167 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49174 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49177 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49180 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49794 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49799 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49801 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49804 | Critical | 9.9 | 4.9% | - |
| CVE-2026-49807 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50294 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50295 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50300 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50302 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50303 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50310 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50312 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50316 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50334 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50339 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50341 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50350 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50352 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50366 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50374 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50375 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50376 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50377 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50381 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50383 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50389 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50394 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50401 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50409 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50415 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50416 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50418 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50419 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50420 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50430 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50431 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50432 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50434 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50437 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50442 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50445 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50453 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50455 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50456 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50473 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50475 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50483 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50485 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50495 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50497 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50504 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50661 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50681 | Critical | 9.9 | 4.9% | - |
| CVE-2026-50690 | Critical | 9.9 | 4.9% | - |
| CVE-2026-54126 | Critical | 9.9 | 4.9% | - |
| CVE-2026-54997 | Critical | 9.9 | 4.9% | - |
| CVE-2026-55000 | Critical | 9.9 | 4.9% | - |
| CVE-2026-55003 | Critical | 9.9 | 4.9% | - |
| CVE-2026-56168 | Critical | 9.9 | 4.9% | - |
| CVE-2026-56184 | Critical | 9.9 | 4.9% | - |
| CVE-2026-56649 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57083 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57084 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57085 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57092 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57095 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57097 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57976 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57979 | Critical | 9.9 | 4.9% | - |
| CVE-2026-57982 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58533 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58535 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58539 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58543 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58545 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58546 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58547 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58614 | Critical | 9.9 | 4.9% | - |
| CVE-2026-58638 | Critical | 9.9 | 4.9% | - |
| CVE-2026-42990 | Critical | 9.8 | 4.9% | - |
| CVE-2026-49172 | Critical | 9.8 | 4.9% | - |
| CVE-2026-50447 | Critical | 9.8 | 4.9% | - |
| CVE-2026-54990 | Critical | 9.8 | 4.9% | - |
| CVE-2026-56188 | Critical | 9.8 | 4.9% | - |
| CVE-2026-56190 | Critical | 9.8 | 4.9% | - |
| CVE-2025-54518 | Critical | 9.8 | 4.7% | - |
| CVE-2026-50380 | Critical | 9.6 | 4.9% | - |
| CVE-2026-62762 | Critical | 9.8 | 3.6% | - |
| CVE-2026-62801 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68830 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68831 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68839 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68843 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68849 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68851 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68852 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68874 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68881 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68886 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68891 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68895 | Critical | 9.8 | 3.6% | - |
| CVE-2026-68898 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69267 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69276 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69286 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69288 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69294 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69303 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69308 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69315 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69316 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69317 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69318 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69321 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69343 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69344 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69345 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69349 | Critical | 9.8 | 3.6% | - |
| CVE-2026-69350 | Critical | 9.8 | 3.6% | - |
Showing the 250 highest-risk of 1680 CVEs. See all in the CVE reference.
Updates (KBs) for Windows 11 Version 25H2
| Update | Released | Severity | CVSS | EPSS | CVEs | Status |
|---|---|---|---|---|---|---|
| KB5072014 | 2025-12-09 | High | 8.8 | 4.6% | 33 | KEVRansomware |
| KB5072033 | 2025-12-09 | High | 8.8 | 4.6% | 34 | KEVRansomware |
| KB5074109 | 2026-01-13 | Critical | 9.8 | 71% | 86 | KEV |
| KB5077181 | 2026-02-10 | High | 8.8 | 24% | 27 | KEV |
| KB5077212 | 2026-02-10 | High | 8.8 | 24% | 27 | KEV |
| KB5101650 | 2026-07-14 | Critical | 9.9 | 4.9% | 380 | KEV |
| KB5124008 | 2026-09-08 | Critical | 9.8 | 2.8% | 628 | KEV |
| KB5083769 | 2026-04-14 | Critical | 9.8 | 2.0% | 121 | KEV |
| KB5120994 | 2026-08-11 | Critical | 9.8 | 1.2% | 194 | KEV |
| KB5121003 | 2026-08-11 | Critical | 9.8 | 1.2% | 194 | KEV |
| KB5094126 | 2026-06-09 | Critical | 9.8 | 2.3% | 107 | - |
| KB5089466 | 2026-06-09 | Critical | 9.8 | 2.2% | 61 | - |
| KB5089549 | 2026-06-09 | Critical | 9.8 | 2.2% | 61 | - |
| KB5079420 | 2026-03-10 | High | 8.8 | 4.7% | 38 | - |
| KB5079473 | 2026-03-10 | High | 8.8 | 4.7% | 41 | - |
| KB5074204 | 2025-12-09 | High | 7.8 | 2.2% | 1 | - |
| KB5084597 | 2026-03-10 | High | 8.0 | 0.9% | 3 | - |
| KB5123273 | 2026-08-11 | High | 7.9 | 0.2% | 1 | - |
| KB5123607 | 2026-08-11 | High | 7.9 | 0.2% | 1 | - |
| KB5129195 | 2026-08-11 | High | 7.8 | 0.3% | 1 | - |
| KB5129241 | 2026-08-11 | High | 7.8 | 0.3% | 1 | - |
Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.
Most searched on Senserva right now
KB5122876 install notes and severity
KB5126052: the full CVE list
KB5122882: patch details
KB5123099: the full CVE list
KB5120708 download and what it fixes
KB5122871 install notes and severity
KB5129235 install notes and severity
KB5122878: patch details
KB5120238 download and what it fixes
KB5129238 download and what it fixes