Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 39 of 183
CVE-2026-96913P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96913 [HIGH] CWE-122 CVE-2026-96913: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58542P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-58542 [HIGH] CWE-122 CVE-2026-58542: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-83753P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83753 [HIGH] CWE-122 CVE-2026-83753: Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to e
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83641P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83641 [HIGH] CWE-122 CVE-2026-83641: Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges loca
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83783P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83783 [HIGH] CWE-122 CVE-2026-83783: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83650P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83650 [HIGH] CWE-122 CVE-2026-83650: Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges loca
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83850P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83850 [HIGH] CWE-122 CVE-2026-83850: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50482P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-50482 [HIGH] CWE-122 CVE-2026-50482: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-58640P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-58640 [HIGH] CWE-122 CVE-2026-58640: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-87699P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-87699 [HIGH] CWE-122 CVE-2026-87699: Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96916P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96916 [HIGH] CWE-122 CVE-2026-96916: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83640P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83640 [HIGH] CWE-122 CVE-2026-83640: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-83829P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83829 [HIGH] CWE-122 CVE-2026-83829: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96843P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96843 [HIGH] CWE-122 CVE-2026-96843: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83833P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83833 [HIGH] CWE-122 CVE-2026-83833: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69963P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69963 [HIGH] CWE-122 CVE-2026-69963: Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83847P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83847 [HIGH] CWE-122 CVE-2026-83847: Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69909P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69909 [HIGH] CWE-122 CVE-2026-69909: Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate pri
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72927P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-72927 [HIGH] CWE-122 CVE-2026-72927: Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Winsock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70330P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-70330 [HIGH] CWE-122 CVE-2026-70330: Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locall
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
nvd