Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 38 of 183
CVE-2026-69918P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69918 [HIGH] CWE-122 CVE-2026-69918: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58547P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-58547 [HIGH] CWE-122 CVE-2026-58547: Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to el
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83902P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83902 [HIGH] CWE-122 CVE-2026-83902: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70117P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70117 [HIGH] CWE-122 CVE-2026-70117: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83768P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83768 [HIGH] CWE-122 CVE-2026-83768: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83896P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83896 [HIGH] CWE-122 CVE-2026-83896: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83903P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83903 [HIGH] CWE-122 CVE-2026-83903: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85902P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85902 [HIGH] CWE-122 CVE-2026-85902: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70285P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70285 [HIGH] CWE-122 CVE-2026-70285: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69898P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69898 [HIGH] CWE-122 CVE-2026-69898: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69633P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69633 [HIGH] CWE-122 CVE-2026-69633: Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70114P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70114 [HIGH] CWE-122 CVE-2026-70114: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83579P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83579 [HIGH] CWE-122 CVE-2026-83579: Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70121P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70121 [HIGH] CWE-122 CVE-2026-70121: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68836P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-68836 [HIGH] CWE-122 CVE-2026-68836: Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileg
Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70027P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70027 [HIGH] CWE-122 CVE-2026-70027: Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70139P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70139 [HIGH] CWE-122 CVE-2026-70139: Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83882P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83882 [HIGH] CWE-122 CVE-2026-83882: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85848P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85848 [HIGH] CWE-122 CVE-2026-85848: Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an autho
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85832P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85832 [HIGH] CWE-122 CVE-2026-85832: Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an autho
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
nvd