Microsoft Windows Server 2025 vulnerabilities

3,648 known vulnerabilities affecting microsoft/windows_server_2025.

Total CVEs

3,648

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL131HIGH2617MEDIUM891LOW9

Vulnerabilities

SortPage 102 of 183

CVE-2025-55233P3HIGHCVSS 7.8fixed in 10.0.26100.7392≥ 10.0.26100.0, < 10.0.26100.74622025-12-09

CVE-2025-55233 [HIGH] CWE-125 CVE-2025-55233: Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privile Out-of-bounds read in Windows Projected File System allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-62467P3HIGHCVSS 7.8fixed in 10.0.26100.7392≥ 10.0.26100.0, < 10.0.26100.74622025-12-09

CVE-2025-62467 [HIGH] CWE-126 CVE-2025-62467: Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to ele Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69850P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13

CVE-2026-69850 [HIGH] CWE-822 CVE-2026-69850: Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privi Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-47991P3HIGHCVSS 7.8fixed in 10.0.26100.4652≥ 10.0.26100.0, < 10.0.26100.46522025-07-08

CVE-2025-47991 [HIGH] CWE-416 CVE-2025-47991: Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privi Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-49742P3HIGHCVSS 7.8fixed in 10.0.26100.4652≥ 10.0.26100.0, < 10.0.26100.46522025-07-08

CVE-2025-49742 [HIGH] CWE-122 CVE-2025-49742: Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to exec Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.

nvd

CVE-2025-53150P3HIGHCVSS 7.8≤ 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14

CVE-2025-53150 [HIGH] CWE-362 CVE-2025-53150: Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally. Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59502P3HIGHCVSS 7.5fixed in 10.0.26100.6508≥ 10.0.26100.0, < 10.0.26100.65842025-10-14

CVE-2025-59502 [HIGH] CWE-400 CVE-2025-59502: Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker t Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-26161P3HIGHCVSS 7.8fixed in 10.0.26100.32690≥ 10.0.26100.0, < 10.0.26100.326902026-04-14

CVE-2026-26161 [HIGH] CWE-20 CVE-2026-26161: Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevat Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59192P3HIGHCVSS 7.8≤ 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14

CVE-2025-59192 [HIGH] CWE-126 CVE-2025-59192: Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally. Buffer over-read in Storport.sys Driver allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-35416P3HIGHCVSS 7.0fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-35416 [HIGH] CWE-416 CVE-2026-35416: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-105009P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13

CVE-2026-105009 [HIGH] CWE-276 CVE-2026-105009: Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elev Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-64658P3HIGHCVSS 7.5fixed in 10.0.26100.7392≥ 10.0.26100.0, < 10.0.26100.74622025-12-09

CVE-2025-64658 [HIGH] CWE-362 CVE-2025-64658: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Shell allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-27908P3HIGHCVSS 7.0fixed in 10.0.26100.32690≥ 10.0.26100.0, < 10.0.26100.326902026-04-14

CVE-2026-27908 [HIGH] CWE-416 CVE-2026-27908: Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate Use after free in Windows TDI Translation Driver (tdx.sys) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69890P3HIGHCVSS 7.5fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08

CVE-2026-69890 [HIGH] CWE-416 CVE-2026-69890: Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate p Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-87705P3HIGHCVSS 7.4fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13

CVE-2026-87705 [HIGH] CWE-940 CVE-2026-87705: Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

nvd

CVE-2025-50161P3HIGHCVSS 7.3fixed in 10.0.26100.4851≥ 10.0.26100.0, < 10.0.26100.49462025-08-12

CVE-2025-50161 [HIGH] CWE-122 CVE-2025-50161: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-62565P3HIGHCVSS 7.3fixed in 10.0.26100.7392≥ 10.0.26100.0, < 10.0.26100.74622025-12-09

CVE-2025-62565 [HIGH] CWE-416 CVE-2025-62565: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-32149P3HIGHCVSS 7.3fixed in 10.0.26100.32690≥ 10.0.26100.0, < 10.0.26100.326902026-04-14

CVE-2026-32149 [HIGH] CWE-20 CVE-2026-32149: Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

nvd

CVE-2026-108399P3HIGHCVSS 7.2fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13

CVE-2026-108399 [HIGH] CWE-122 CVE-2026-108399: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69396P3HIGHCVSS 7.1fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08

CVE-2026-69396 [HIGH] CWE-416 CVE-2026-69396: Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network. Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

nvd

← Previous102 / 183Next →