Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 24 of 183
CVE-2026-83996P3HIGHCVSS 8.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-83996 [HIGH] CWE-122 CVE-2026-83996: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-21294P3HIGHCVSS 8.1fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21294 [HIGH] CWE-591 CVE-2025-21294: Microsoft Digest Authentication Remote Code Execution Vulnerability
Microsoft Digest Authentication Remote Code Execution Vulnerability
nvd
CVE-2026-40415P3HIGHCVSS 8.1fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12
CVE-2026-40415 [HIGH] CWE-416 CVE-2026-40415: Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-108460P3HIGHCVSS 8.1fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-108460 [HIGH] CWE-416 CVE-2026-108460: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88120P3HIGHCVSS 8.1fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88120 [HIGH] CWE-416 CVE-2026-88120: Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-88119P3HIGHCVSS 8.1fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88119 [HIGH] CWE-416 CVE-2026-88119: Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70038P3HIGHCVSS 8.1fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70038 [HIGH] CWE-122 CVE-2026-70038: Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69524P3HIGHCVSS 8.1fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69524 [HIGH] CWE-416 CVE-2026-69524: Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code o
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69546P3HIGHCVSS 8.1fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69546 [HIGH] CWE-416 CVE-2026-69546: Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code o
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-83997P3HIGHCVSS 8.1fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-83997 [HIGH] CWE-416 CVE-2026-83997: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69732P3HIGHCVSS 8.1fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69732 [HIGH] CWE-122 CVE-2026-69732: Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69325P3HIGHCVSS 8.1fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69325 [HIGH] CWE-122 CVE-2026-69325: Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over
Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-65796P3HIGHCVSS 8.1fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-65796 [HIGH] CWE-122 CVE-2026-65796: Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-65679P3HIGHCVSS 8.1fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-65679 [HIGH] CWE-122 CVE-2026-65679: Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execut
Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62781P3HIGHCVSS 8.1fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62781 [HIGH] CWE-122 CVE-2026-62781: Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a net
Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62819P3HIGHCVSS 8.1fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62819 [HIGH] CWE-416 CVE-2026-62819: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-88117P3HIGHCVSS 8.1fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88117 [HIGH] CWE-416 CVE-2026-88117: Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70570P3HIGHCVSS 8.1fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-70570 [HIGH] CWE-416 CVE-2026-70570: Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
nvd
CVE-2026-59134P3HIGHCVSS 8.1fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-59134 [HIGH] CWE-20 CVE-2026-59134: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-61363P3HIGHCVSS 8.1fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-61363 [HIGH] CWE-20 CVE-2026-61363: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
nvd