Microsoft
Windows 11
Microsoft desktop operating system for PCs.
2025-10 B (22621.6060)
- Release date
- October 14, 2025
- Security status
- Current version appears affected by 5 high-severity CVEs.
Source
Vendor Release Information
Public release notes are linked for the latest stored release.
Release history
See the latest published releases stored for this product.
| Version | Published | Notes |
|---|---|---|
| 2025-10 B (22621.6060) | 2025-10-14 | Release Notes |
Vulnerability tracking
versionPing monitors CVEs for this product. Matching CVEs are listed below. We only display CVEs with a CVSS score of 7.0 or higher that were published within the last 90 days.
Affected status is inferred from published affected version ranges where available. Always verify against the vendor advisory before making production decisions.
| CVE | Severity | Published | Status | Summary |
|---|---|---|---|---|
| CVE-2025-59289 | HIGH (7.0) | 2025-10-14 | Current versionaffected | Double free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Affected versions
|
| CVE-2025-59502 | HIGH (7.5) | 2025-10-14 | Current versionaffected | Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network. Affected versions
|
| CVE-2025-59290 | HIGH (7.8) | 2025-10-14 | Current versionaffected | Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Affected versions
|
| CVE-2025-59220 | HIGH (7.0) | 2025-09-18 | Current versionaffected | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Affected versions
|
| CVE-2025-53789 | HIGH (7.8) | 2025-08-12 | Current versionaffected | Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally. Affected versions
|