CVE-2025-29971: Microsoft Windows 11 22h2

High severity, CVSS 7.5. EPSS: 66.7% chance of exploitation in the next 30 days.

Out-of-bounds read in Web Threat Defense (WTD.sys) allows an unauthorized attacker to deny service over a network.

Affected products

• Microsoft Windows 11 22h2: before 10.0.22621.5335 (fixed in 10.0.22621.5335)
• Microsoft Windows 11 23h2: before 10.0.22631.5335 (fixed in 10.0.22631.5335)
• Microsoft Windows 11 24h2: before 10.0.26100.4061 (fixed in 10.0.26100.4061)

Published 2025-05-13. Last modified 2026-06-17.