Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 23 of 183
CVE-2026-70207P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70207 [HIGH] CWE-122 CVE-2026-70207: Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute c
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69514P3HIGHCVSS 7.5fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69514 [HIGH] CWE-122 CVE-2026-69514: Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execu
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.
nvd
CVE-2026-69688P3HIGHCVSS 7.5fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69688 [HIGH] CWE-122 CVE-2026-69688: Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-33829P3MEDIUMCVSS 4.3PoCfixed in 10.0.26100.32690≥ 10.0.26100.0, < 10.0.26100.326902026-04-14
CVE-2026-33829 [MEDIUM] CWE-200 CVE-2026-33829: Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauth
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-59295P3HIGHCVSS 8.8≤ 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14
CVE-2025-59295 [HIGH] CWE-122 CVE-2025-59295: Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-27477P3HIGHCVSS 8.8fixed in 10.0.26100.3775≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-27477 [HIGH] CWE-122 CVE-2025-27477: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute c
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-49125P3HIGHCVSS 8.8fixed in 10.0.26100.2605≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49125 [HIGH] CWE-122 CVE-2024-49125: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
nvd
CVE-2025-21303P3HIGHCVSS 8.8fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21303 [HIGH] CWE-122 CVE-2025-21303: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21302P3HIGHCVSS 8.8fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21302 [HIGH] CWE-122 CVE-2025-21302: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21305P3HIGHCVSS 8.8fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21305 [HIGH] CWE-122 CVE-2025-21305: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21252P3HIGHCVSS 8.8fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21252 [HIGH] CWE-122 CVE-2025-21252: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2025-21306P3HIGHCVSS 8.8fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21306 [HIGH] CWE-122 CVE-2025-21306: Windows Telephony Service Remote Code Execution Vulnerability
Windows Telephony Service Remote Code Execution Vulnerability
nvd
CVE-2026-96252P3CRITICALCVSS 9.1fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96252 [CRITICAL] CWE-347 CVE-2026-96252: Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) all
Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2025-27481P3HIGHCVSS 8.8fixed in 10.0.26100.3775≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-27481 [HIGH] CWE-121 CVE-2025-27481: Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute
Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-105008P3CRITICALCVSS 9.0fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-105008 [CRITICAL] CWE-420 CVE-2026-105008: No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-45602P3CRITICALCVSS 9.1fixed in 10.0.26100.32995≥ 10.0.26100.0, < 10.0.26100.329952026-06-09
CVE-2026-45602 [CRITICAL] CWE-349 CVE-2026-45602: No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering ov
No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2026-69765P3HIGHCVSS 8.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69765 [HIGH] CWE-416 CVE-2026-69765: Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code o
Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69619P3HIGHCVSS 8.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69619 [HIGH] CWE-125 CVE-2026-69619: Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges
Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-85936P3HIGHCVSS 8.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85936 [HIGH] CWE-122 CVE-2026-85936: Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-96917P3HIGHCVSS 8.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96917 [HIGH] CWE-122 CVE-2026-96917: Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
nvd