[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f59_t3fR7VrL6oRfbSoR0OdmBR4BHsmzzD_7cJXq0Yaw":3,"g5a-family:microsoft\u002Fwindows_11_25h2":122,"g5a-ex:microsoft\u002Fwindows_11_25h2@*":123},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":33,"kevVulnerabilities":81,"seoMetadata":100,"meta":119},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"microsoft","windows_11_25h2",5,108,3,"2025-10-14",[14,18,20,22,24],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.26200.6899",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.26200.7392",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.26200.7456",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.26200.7462",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.26200.7623","Windows 11 25h2 by Microsoft is a technology product with 5 tracked versions and 108 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31,32],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},[34,41,46,53,57,61,66,70,74,78],{"cveId":35,"description":36,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":40},"CVE-2025-24990","Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems.  This is an announcement of the upcoming removal of ltmdm64.sys driver.  The driver has been removed in the October cumulative update.\nFax modem hardware dependent on this specific driver will no longer work on Windows.\nMicrosoft recommends removing any existing dependencies on this hardware.",7.8,"v3.1","High",0.06369,{"cveId":42,"description":43,"publishedDate":12,"cvssScore":44,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":45},"CVE-2025-55681","Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.",7,0.05425,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":38,"severity":51,"isKev":4,"epssScore":52},"CVE-2025-47827","In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.","2025-06-05",4.6,"Medium",0.04927,{"cveId":54,"description":55,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":56},"CVE-2025-59199","Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.",0.04238,{"cveId":58,"description":59,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":60},"CVE-2025-55692","Improper input validation in Windows Error Reporting allows an authorized attacker to elevate privileges locally.",0.03384,{"cveId":62,"description":63,"publishedDate":12,"cvssScore":64,"cvssVersion":38,"severity":51,"isKev":17,"epssScore":65},"CVE-2025-55338","Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.",6.1,0.03092,{"cveId":67,"description":68,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":69},"CVE-2025-55694","Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally.",0.03028,{"cveId":71,"description":72,"publishedDate":12,"cvssScore":44,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":73},"CVE-2025-59194","Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally.",0.02674,{"cveId":75,"description":76,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":4,"epssScore":77},"CVE-2025-59230","Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.",0.02657,{"cveId":79,"description":36,"publishedDate":12,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":80},"CVE-2025-24052",0.02454,[82,90,94,97],{"cveId":83,"description":84,"publishedDate":85,"cvssScore":37,"severity":39,"isKev":4,"epssScore":86,"cisaVulnName":87,"cisaDateAdded":85,"cisaShortDescription":88,"cisaRequiredAction":89},"CVE-2026-81963","Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.","2026-09-08",0.00393,"Microsoft Windows Link Following Vulnerability","Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":35,"description":36,"publishedDate":12,"cvssScore":37,"severity":39,"isKev":4,"epssScore":40,"cisaVulnName":91,"cisaDateAdded":12,"cisaShortDescription":92,"cisaRequiredAction":93},"Microsoft Windows Untrusted Pointer Dereference Vulnerability","Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"severity":51,"isKev":4,"epssScore":52,"cisaVulnName":95,"cisaDateAdded":12,"cisaShortDescription":96,"cisaRequiredAction":93},"IGEL OS Use of a Key Past its Expiration Date Vulnerability","IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.",{"cveId":75,"description":76,"publishedDate":12,"cvssScore":37,"severity":39,"isKev":4,"epssScore":77,"cisaVulnName":98,"cisaDateAdded":12,"cisaShortDescription":99,"cisaRequiredAction":93},"Microsoft Windows Improper Access Control Vulnerability","Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally.",{"title":101,"metaDescription":102,"keywords":103,"structuredData":104},"Windows 11 25h2 by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Windows 11 25h2 by Microsoft covering 5 versions with 108 tracked vulnerabilities including 0 critical and 3 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows 11 25h2 vulnerabilities, Windows 11 25h2 security, Windows 11 25h2 CVE, Microsoft Windows 11 25h2, Windows 11 25h2 threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows 11 25h2 KEV, Windows 11 25h2 exploited vulnerabilities",{"@context":105,"@type":106,"name":107,"description":102,"url":108,"manufacturer":109,"applicationCategory":113,"softwareVersion":114,"mainEntity":115},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows 11 25h2","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows_11_25h2",{"@type":110,"name":111,"url":112},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","5 versions tracked",{"@type":116,"name":117,"description":118,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows 11 25h2 Security Vulnerabilities","Security vulnerabilities affecting Windows 11 25h2 by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":120,"apiVersion":121},"2026-10-17T15:53:13.312Z","3.0",[],{"rows":124,"total":143,"capped":17,"failed":16},[125,130,135,139],{"cveId":83,"name":87,"severity":39,"cvss":37,"added":85,"epss":86,"published":126,"ranges":127,"checked":4,"hits":129,"covers":17},"2026-09-08T18:21:00.09",[128],"before 10.0.26200.9445",[],{"cveId":35,"name":91,"severity":39,"cvss":37,"added":12,"epss":40,"published":131,"ranges":132,"checked":4,"hits":134,"covers":17},"2025-10-14T17:15:39.193",[133],"before 10.0.26200.6899",[],{"cveId":47,"name":95,"severity":51,"cvss":50,"added":12,"epss":52,"published":136,"ranges":137,"checked":4,"hits":138,"covers":17},"2025-06-05T14:15:32.263",[133],[],{"cveId":75,"name":98,"severity":39,"cvss":37,"added":12,"epss":77,"published":140,"ranges":141,"checked":4,"hits":142,"covers":17},"2025-10-14T17:16:04.173",[133],[],4]