Windows 11 Version 25H2
- Software type
- Operating system
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/19/2026, Windows 11 Version 25H2 recorded 657 security vulnerabilities in the last 90 days, of which 515 are rated High or Critical. Notably, 3 of these vulnerabilities are actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Windows 11 Version 25H2 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-105016Microsoft QUIC Remote Code Execution VulnerabilityCVE-2026-108463Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2026-108136Microsoft Windows Search Component Elevation of Privilege VulnerabilityCVE-2026-108135Windows Backup Engine Elevation of Privilege VulnerabilityCVE-2026-108134Windows Autopilot Elevation of Privilege Vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-105016Microsoft QUIC Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityCritical |
CVE-2026-108463Windows SmartScreen Security Feature Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-108136Microsoft Windows Search Component Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-108135Windows Backup Engine Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-108134Windows Autopilot Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-108130Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-108129Role: DNS Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-108128Role: DNS Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-108127Role: DNS Server Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
2,839 Results | Page 1 of 284