Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL127HIGH2618MEDIUM894LOW9
Vulnerabilities
Page 10 of 183
CVE-2026-69547P2HIGHCVSS 8.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69547 [HIGH] CWE-122 CVE-2026-69547: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69485P2HIGHCVSS 8.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69485 [HIGH] CWE-908 CVE-2026-69485: Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
nvd
CVE-2026-62790P2HIGHCVSS 8.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62790 [HIGH] CWE-122 CVE-2026-62790: Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-62800P2HIGHCVSS 8.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62800 [HIGH] CWE-122 CVE-2026-62800: Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-88165P2HIGHCVSS 8.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88165 [HIGH] CWE-787 CVE-2026-88165: Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute cod
Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-85931P2HIGHCVSS 8.8≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85931 [HIGH] CWE-122 CVE-2026-85931: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-49169P2HIGHCVSS 8.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-49169 [HIGH] CWE-416 CVE-2026-49169: Use after free in DNS Server allows an authorized attacker to execute code over a network.
Use after free in DNS Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-50502P2HIGHCVSS 8.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-50502 [HIGH] CWE-1220 CVE-2026-50502: Insufficient granularity of access control in Windows Event Logging Service allows an authorized att
Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.
nvd
CVE-2025-27480P3HIGHCVSS 8.1fixed in 10.0.26100.3775≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-27480 [HIGH] CWE-416 CVE-2025-27480: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-105723P2CRITICALCVSS 9.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-105723 [CRITICAL] CWE-822 CVE-2026-105723: Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attack
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-83693P2CRITICALCVSS 9.8≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83693 [CRITICAL] CWE-122 CVE-2026-83693: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83519P2CRITICALCVSS 9.8≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83519 [CRITICAL] CWE-122 CVE-2026-83519: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute cod
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83780P2CRITICALCVSS 9.8≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83780 [CRITICAL] CWE-416 CVE-2026-83780: Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a ne
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69845P2CRITICALCVSS 9.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69845 [CRITICAL] CWE-20 CVE-2026-69845: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69491P2CRITICALCVSS 9.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69491 [CRITICAL] CWE-122 CVE-2026-69491: Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execu
Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-73009P2CRITICALCVSS 9.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-73009 [CRITICAL] CWE-416 CVE-2026-73009: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69276P2CRITICALCVSS 9.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69276 [CRITICAL] CWE-122 CVE-2026-69276: Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthor
Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-78445P2CRITICALCVSS 9.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-78445 [CRITICAL] CWE-416 CVE-2026-78445: Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to exec
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69730P2CRITICALCVSS 9.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69730 [CRITICAL] CWE-416 CVE-2026-69730: Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69586P2CRITICALCVSS 9.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69586 [CRITICAL] CWE-122 CVE-2026-69586: Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute c
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
nvd