Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 107 of 183
CVE-2026-83871P3HIGHCVSS 7.0fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83871 [HIGH] CWE-122 CVE-2026-83871: Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privilege
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-84014P3HIGHCVSS 7.0fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-84014 [HIGH] CWE-122 CVE-2026-84014: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85827P3HIGHCVSS 7.0≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85827 [HIGH] CWE-122 CVE-2026-85827: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83683P3MEDIUMCVSS 6.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83683 [MEDIUM] CWE-36 CVE-2026-83683: Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to dis
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-20812P3MEDIUMCVSS 6.5fixed in 10.0.26100.32230≥ 10.0.26100.0, < 10.0.26100.322302026-01-13
CVE-2026-20812 [MEDIUM] CWE-20 CVE-2026-20812: Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authoriz
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network.
nvd
CVE-2025-49670P3MEDIUMCVSS 6.5fixed in 10.0.26100.4652≥ 10.0.26100.0, < 10.0.26100.46522025-07-08
CVE-2025-49670 [MEDIUM] CWE-122 CVE-2025-49670: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-85840P3MEDIUMCVSS 6.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85840 [MEDIUM] CWE-552 CVE-2026-85840: Files or directories accessible to external parties in Windows Event Viewer allows an authorized att
Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-88137P3MEDIUMCVSS 6.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88137 [MEDIUM] CWE-552 CVE-2026-88137: Files or directories accessible to external parties in WebDAV allows an authorized attacker to discl
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97828P3MEDIUMCVSS 6.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-97828 [MEDIUM] CWE-126 CVE-2026-97828: Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-85841P3MEDIUMCVSS 6.6fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85841 [MEDIUM] CWE-416 CVE-2026-85841: Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-61920P3MEDIUMCVSS 6.6fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-61920 [MEDIUM] CWE-362 CVE-2026-61920: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.
nvd
CVE-2024-43625P3HIGHCVSS 8.1fixed in 10.0.26100.2314≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43625 [HIGH] CWE-416 CVE-2024-43625: Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
nvd
CVE-2025-21220P3HIGHCVSS 7.5fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21220 [HIGH] CWE-908 CVE-2025-21220: Microsoft Message Queuing Information Disclosure Vulnerability
Microsoft Message Queuing Information Disclosure Vulnerability
nvd
CVE-2025-55698P3HIGHCVSS 7.7≤ 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14
CVE-2025-55698 [HIGH] CWE-476 CVE-2025-55698: Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a net
Null pointer dereference in Windows DirectX allows an authorized attacker to deny service over a network.
nvd
CVE-2024-49107P3HIGHCVSS 7.3fixed in 10.0.26100.2605≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49107 [HIGH] CWE-59 CVE-2024-49107: WmsRepair Service Elevation of Privilege Vulnerability
WmsRepair Service Elevation of Privilege Vulnerability
nvd
CVE-2024-43641P3HIGHCVSS 7.8fixed in 10.0.26100.2314≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43641 [HIGH] CWE-190 CVE-2024-43641: Windows Registry Elevation of Privilege Vulnerability
Windows Registry Elevation of Privilege Vulnerability
nvd
CVE-2025-21275P3HIGHCVSS 7.8fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21275 [HIGH] CWE-285 CVE-2025-21275: Windows App Package Installer Elevation of Privilege Vulnerability
Windows App Package Installer Elevation of Privilege Vulnerability
nvd
CVE-2024-49072P3HIGHCVSS 7.8fixed in 10.0.26100.2605≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49072 [HIGH] CWE-122 CVE-2024-49072: Windows Task Scheduler Elevation of Privilege Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
nvd
CVE-2025-21281P3HIGHCVSS 7.8fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21281 [HIGH] CWE-416 CVE-2025-21281: Microsoft COM for Windows Elevation of Privilege Vulnerability
Microsoft COM for Windows Elevation of Privilege Vulnerability
nvd
CVE-2025-21234P3HIGHCVSS 7.8fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21234 [HIGH] CWE-20 CVE-2025-21234: Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
nvd