Windows 11 25h2
by Microsoft
CVEs (597)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-55689 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-55687 | 0.00 | — | 0.00 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally. | |||
| CVE-2025-55686 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-55685 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-55681 | 0.00 | — | 0.05 | Oct 14, 2025 | Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-55677 | 0.00 | — | 0.00 | Oct 14, 2025 | Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-55676 | 0.00 | — | 0.01 | Oct 14, 2025 | Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally. | |||
| CVE-2025-55340 | 0.00 | — | 0.00 | Oct 14, 2025 | Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally. | |||
| CVE-2025-55339 | 0.00 | — | 0.00 | Oct 14, 2025 | Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-55338 | 0.00 | — | 0.03 | Oct 14, 2025 | Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. | |||
| CVE-2025-55336 | 0.00 | — | 0.01 | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. | |||
| CVE-2025-55335 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally. | |||
| CVE-2025-55333 | 0.00 | — | 0.01 | Oct 14, 2025 | Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. | |||
| CVE-2025-55325 | 0.00 | — | 0.00 | Oct 14, 2025 | Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. | |||
| CVE-2025-24052 | 0.00 | — | 0.02 | Oct 14, 2025 | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax… | |||
| CVE-2025-50174 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-48004 | 0.00 | — | 0.02 | Oct 14, 2025 | Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally. |
- CVE-2025-55689Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
- CVE-2025-55687Oct 14, 2025risk 0.00cvss —epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally.
- CVE-2025-55686Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
- CVE-2025-55685Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
- CVE-2025-55681Oct 14, 2025risk 0.00cvss —epss 0.05
Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.
- CVE-2025-55677Oct 14, 2025risk 0.00cvss —epss 0.00
Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
- CVE-2025-55676Oct 14, 2025risk 0.00cvss —epss 0.01
Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally.
- CVE-2025-55340Oct 14, 2025risk 0.00cvss —epss 0.00
Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally.
- CVE-2025-55339Oct 14, 2025risk 0.00cvss —epss 0.00
Out-of-bounds read in Windows NDIS allows an authorized attacker to elevate privileges locally.
- CVE-2025-55338Oct 14, 2025risk 0.00cvss —epss 0.03
Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2025-55336Oct 14, 2025risk 0.00cvss —epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.
- CVE-2025-55335Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
- CVE-2025-55333Oct 14, 2025risk 0.00cvss —epss 0.01
Incomplete comparison with missing factors in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
- CVE-2025-55325Oct 14, 2025risk 0.00cvss —epss 0.00
Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
- CVE-2025-24052Oct 14, 2025risk 0.00cvss —epss 0.02
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax…
- CVE-2025-50174Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
- CVE-2025-48004Oct 14, 2025risk 0.00cvss —epss 0.02
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
Page 30 of 30