# Microsoft Windows 11 25h2


- [CVE-2026-33824](https://insights.sbomify.com/CVE-2026-33824/): Microsoft Internet Key Exchange (IKE) Service Extensions Double Free (critical 9.8, exploited in the wild)
- [CVE-2026-96951](https://insights.sbomify.com/CVE-2026-96951/): Microsoft Windows Command Injection (high 8.8, exploited in the wild)
- [CVE-2026-21510](https://insights.sbomify.com/CVE-2026-21510/): Microsoft Windows Shell Protection Mechanism Failure (high 8.8, exploited in the wild)
- [CVE-2026-21513](https://insights.sbomify.com/CVE-2026-21513/): Microsoft MSHTML Framework Protection Mechanism Failure (high 8.8, exploited in the wild)
- [CVE-2026-81963](https://insights.sbomify.com/CVE-2026-81963/): Microsoft Windows Link Following (high 7.8, exploited in the wild)
- [CVE-2026-21519](https://insights.sbomify.com/CVE-2026-21519/): Microsoft Windows Type Confusion (high 7.8, exploited in the wild)
- [CVE-2026-21533](https://insights.sbomify.com/CVE-2026-21533/): Microsoft Windows Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2025-62221](https://insights.sbomify.com/CVE-2025-62221/): Microsoft Windows Use After Free (high 7.8, exploited in the wild)
- [CVE-2025-60710](https://insights.sbomify.com/CVE-2025-60710/): Microsoft Windows Link Following (high 7.8, exploited in the wild)
- [CVE-2025-24990](https://insights.sbomify.com/CVE-2025-24990/): Microsoft Windows Untrusted Pointer Dereference (high 7.8, exploited in the wild)
- [CVE-2025-59230](https://insights.sbomify.com/CVE-2025-59230/): Microsoft Windows Improper Access Control (high 7.8, exploited in the wild)
- [CVE-2026-68820](https://insights.sbomify.com/CVE-2026-68820/): Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free (high 7.0, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/windows-11-25h2/