Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 48 of 183
CVE-2026-85369P3HIGHCVSS 8.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85369 [HIGH] CWE-125 CVE-2026-85369: Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83728P3HIGHCVSS 8.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83728 [HIGH] CWE-1286 CVE-2026-83728: Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attack
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
nvd
CVE-2025-27482P3HIGHCVSS 8.1fixed in 10.0.26100.3775≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-27482 [HIGH] CWE-591 CVE-2025-27482: Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unaut
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-24045P3HIGHCVSS 8.1fixed in 10.0.26100.3403≥ 10.0.26100.0, < 10.0.26100.34762025-03-11
CVE-2025-24045 [HIGH] CWE-591 CVE-2025-24045: Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unau
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-29828P3HIGHCVSS 8.1fixed in 10.0.26100.4270≥ 10.0.26100.0, < 10.0.26100.43492025-06-10
CVE-2025-29828 [HIGH] CWE-401 CVE-2025-29828: Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unaut
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-42986P3HIGHCVSS 7.8fixed in 10.0.26100.32995≥ 10.0.26100.0, < 10.0.26100.329952026-06-09
CVE-2026-42986 [HIGH] CWE-416 CVE-2026-42986: Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges l
Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49735P3HIGHCVSS 8.1fixed in 10.0.26100.4349≥ 10.0.26100.0, < 10.0.26200.43492025-07-08
CVE-2025-49735 [HIGH] CWE-416 CVE-2025-49735: Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code
Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2025-32710P3HIGHCVSS 8.1fixed in 10.0.26100.3981≥ 10.0.26100.0, < 10.0.26100.40612025-06-10
CVE-2025-32710 [HIGH] CWE-362 CVE-2025-32710: Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70563P3HIGHCVSS 8.1fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-70563 [HIGH] CWE-59 CVE-2026-70563: Improper link resolution before file access ('link following') in Windows Shell allows an unauthoriz
Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-69807P3HIGHCVSS 8.0fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69807 [HIGH] CWE-22 CVE-2026-69807: Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell
Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-40400P3HIGHCVSS 8.0fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-40400 [HIGH] CWE-23 CVE-2026-40400: Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a n
Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.
nvd
CVE-2026-68827P3HIGHCVSS 8.0fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-68827 [HIGH] CWE-122 CVE-2026-68827: Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate priv
Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.
nvd
CVE-2026-69876P3HIGHCVSS 8.0fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69876 [HIGH] CWE-415 CVE-2026-69876: Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
nvd
CVE-2026-83860P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83860 [HIGH] CWE-121 CVE-2026-83860: Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a ne
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-70233P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70233 [HIGH] CWE-122 CVE-2026-70233: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26668P3HIGHCVSS 7.5fixed in 10.0.26100.3775≥ 10.0.26100.0, < 10.0.26100.37752025-04-08
CVE-2025-26668 [HIGH] CWE-122 CVE-2025-26668: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-21236P3HIGHCVSS 7.8fixed in 10.0.26100.32313≥ 10.0.26100.0, < 10.0.26100.323702026-02-10
CVE-2026-21236 [HIGH] CWE-122 CVE-2026-21236: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att
Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83830P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83830 [HIGH] CWE-122 CVE-2026-83830: Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to ele
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70132P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70132 [HIGH] CWE-122 CVE-2026-70132: Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attack
Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70103P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70103 [HIGH] CWE-122 CVE-2026-70103: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd