Microsoft Windows Server 2025 vulnerabilities

1,706 known vulnerabilities affecting microsoft/windows_server_2025.

Total CVEs

1,706

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL40HIGH1216MEDIUM441LOW9

Vulnerabilities

SortPage 29 of 86

CVE-2026-35424P3HIGHCVSS 7.5fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-35424 [HIGH] CWE-401 CVE-2026-35424: Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol a Missing release of memory after effective lifetime in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-21251P3HIGHCVSS 7.8fixed in 10.0.26100.32313≥ 10.0.26100.0, < 10.0.26100.323702026-02-10

CVE-2026-21251 [HIGH] CWE-416 CVE-2026-21251: Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privilege Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59201P3HIGHCVSS 7.8≤ 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14

CVE-2025-59201 [HIGH] CWE-284 CVE-2025-59201: Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26156P3HIGHCVSS 7.8fixed in 10.0.26100.32690≥ 10.0.26100.0, < 10.0.26100.326902026-04-14

CVE-2026-26156 [HIGH] CWE-20 CVE-2026-26156: Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locall Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-32154P3HIGHCVSS 7.8fixed in 10.0.26100.32690≥ 10.0.26100.0, < 10.0.26100.326902026-04-14

CVE-2026-32154 [HIGH] CWE-416 CVE-2026-32154: Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-62571P3HIGHCVSS 7.8fixed in 10.0.26100.7392≥ 10.0.26100.0, < 10.0.26100.74622025-12-09

CVE-2025-62571 [HIGH] CWE-20 CVE-2025-62571: Improper input validation in Windows Installer allows an authorized attacker to elevate privileges l Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59277P3HIGHCVSS 7.8fixed in 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14

CVE-2025-59277 [HIGH] CWE-1287 CVE-2025-59277: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-24292P3HIGHCVSS 7.8fixed in 10.0.26100.32463≥ 10.0.26100.0, < 10.0.26100.325222026-03-10

CVE-2026-24292 [HIGH] CWE-416 CVE-2026-24292: Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to eleva Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-54993P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14

CVE-2026-54993 [HIGH] CWE-122 CVE-2026-54993: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-41095P3HIGHCVSS 7.8fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-41095 [HIGH] CWE-416 CVE-2026-41095: Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally. Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50312P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14

CVE-2026-50312 [HIGH] CWE-416 CVE-2026-50312: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-42916P3HIGHCVSS 7.8fixed in 10.0.26100.32995≥ 10.0.26100.0, < 10.0.26100.329952026-06-09

CVE-2026-42916 [HIGH] CWE-190 CVE-2026-42916: Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate priv Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-41088P3HIGHCVSS 7.8fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-41088 [HIGH] CWE-73 CVE-2026-41088: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-34344P3HIGHCVSS 7.8fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-34344 [HIGH] CWE-843 CVE-2026-34344: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-58610P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14

CVE-2026-58610 [HIGH] CWE-122 CVE-2026-58610: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.

nvd

CVE-2026-50337P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14

CVE-2026-50337 [HIGH] CWE-704 CVE-2026-50337: Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate p Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-58537P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14

CVE-2026-58537 [HIGH] CWE-416 CVE-2026-58537: Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to el Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50493P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14

CVE-2026-50493 [HIGH] CWE-416 CVE-2026-50493: Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locall Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-34330P3HIGHCVSS 7.8fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-34330 [HIGH] CWE-190 CVE-2026-34330: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-40408P3HIGHCVSS 7.8fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-40408 [HIGH] CWE-416 CVE-2026-40408: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

nvd

← Previous29 / 86Next →