cbcvebase.

Microsoft Windows Server 2025 vulnerabilities

3,648 known vulnerabilities affecting microsoft/windows_server_2025.

Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9

Vulnerabilities

Page 49 of 183
CVE-2026-83514P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83514 [HIGH] CWE-122 CVE-2026-83514: Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to e Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69354P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.334382026-10-13
CVE-2026-69354 [HIGH] CWE-122 CVE-2026-69354: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70048P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70048 [HIGH] CWE-122 CVE-2026-70048: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70112P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70112 [HIGH] CWE-122 CVE-2026-70112: Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code lo Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.
nvd
CVE-2026-83881P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83881 [HIGH] CWE-122 CVE-2026-83881: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69949P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69949 [HIGH] CWE-122 CVE-2026-69949: Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70143P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70143 [HIGH] CWE-122 CVE-2026-70143: Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute c Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.
nvd
CVE-2026-70093P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70093 [HIGH] CWE-122 CVE-2026-70093: Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevat Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83569P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83569 [HIGH] CWE-122 CVE-2026-83569: Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-78459P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-78459 [HIGH] CWE-122 CVE-2026-78459: Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50501P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-50501 [HIGH] CWE-121 CVE-2026-50501: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-83698P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83698 [HIGH] CWE-122 CVE-2026-83698: Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacke Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83692P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83692 [HIGH] CWE-122 CVE-2026-83692: Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83863P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83863 [HIGH] CWE-122 CVE-2026-83863: Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privi Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83638P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83638 [HIGH] CWE-122 CVE-2026-83638: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70238P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70238 [HIGH] CWE-122 CVE-2026-70238: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to ele Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83639P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83639 [HIGH] CWE-122 CVE-2026-83639: Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83588P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83588 [HIGH] CWE-122 CVE-2026-83588: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97804P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-97804 [HIGH] CWE-122 CVE-2026-97804: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-105003P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-105003 [HIGH] CWE-122 CVE-2026-105003: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
nvd
Microsoft Windows Server 2025 vulnerabilities | cvebase