Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 36 of 183
CVE-2026-85867P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85867 [HIGH] CWE-122 CVE-2026-85867: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69793P3HIGHCVSS 7.5fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69793 [HIGH] CWE-1288 CVE-2026-69793: Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-83754P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83754 [HIGH] CWE-122 CVE-2026-83754: Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-62787P3HIGHCVSS 7.5fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62787 [HIGH] CWE-416 CVE-2026-62787: Use after free in Windows DNS allows an authorized attacker to execute code over a network.
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
nvd
CVE-2026-50685P3HIGHCVSS 7.5fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-50685 [HIGH] CWE-415 CVE-2026-50685: Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.
Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.
nvd
CVE-2026-96071P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96071 [HIGH] CWE-122 CVE-2026-96071: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-69602P3HIGHCVSS 7.5fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69602 [HIGH] CWE-416 CVE-2026-69602: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges o
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69706P3HIGHCVSS 7.5fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69706 [HIGH] CWE-416 CVE-2026-69706: Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69597P3HIGHCVSS 7.5fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69597 [HIGH] CWE-416 CVE-2026-69597: Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a networ
Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-78446P3HIGHCVSS 7.5fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-78446 [HIGH] CWE-416 CVE-2026-78446: Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute cod
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-85798P3HIGHCVSS 7.2fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85798 [HIGH] CWE-122 CVE-2026-85798: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
nvd
CVE-2025-59199P3HIGHCVSS 7.8fixed in 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14
CVE-2025-59199 [HIGH] CWE-284 CVE-2025-59199: Improper access control in Software Protection Platform (SPP) allows an authorized attacker to eleva
Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-49117P3HIGHCVSS 8.8fixed in 10.0.26100.2605≥ 10.0.26100.0, < 10.0.26100.26052024-12-12
CVE-2024-49117 [HIGH] CWE-393 CVE-2024-49117: Windows Hyper-V Remote Code Execution Vulnerability
Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2026-88091P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88091 [HIGH] CWE-502 CVE-2026-88091: Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacke
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49795P3HIGHCVSS 8.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-49795 [HIGH] CWE-416 CVE-2026-49795: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50382P3HIGHCVSS 8.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-50382 [HIGH] CWE-822 CVE-2026-50382: Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code local
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.
nvd
CVE-2026-96914P3HIGHCVSS 8.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96914 [HIGH] CWE-122 CVE-2026-96914: Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an auth
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69945P3HIGHCVSS 8.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69945 [HIGH] CWE-862 CVE-2026-69945: Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70185P3HIGHCVSS 8.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70185 [HIGH] CWE-639 CVE-2026-70185: Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a securit
Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-50385P3HIGHCVSS 8.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-50385 [HIGH] CWE-362 CVE-2026-50385: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.
nvd