Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 56 of 183
CVE-2026-102205P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-102205 [HIGH] CWE-122 CVE-2026-102205: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-58530P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-58530 [HIGH] CWE-122 CVE-2026-58530: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker t
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-88128P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88128 [HIGH] CWE-122 CVE-2026-88128: Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate priv
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83758P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83758 [HIGH] CWE-122 CVE-2026-83758: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
nvd
CVE-2026-83692P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83692 [HIGH] CWE-122 CVE-2026-83692: Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate pr
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102227P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-102227 [HIGH] CWE-122 CVE-2026-102227: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
nvd
CVE-2026-85874P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85874 [HIGH] CWE-416 CVE-2026-85874: Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute cod
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.
nvd
CVE-2026-70580P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70580 [HIGH] CWE-306 CVE-2026-70580: Missing authentication for critical function in Windows Credential Guard allows an authorized attack
Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.
nvd
CVE-2026-69758P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69758 [HIGH] CWE-122 CVE-2026-69758: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62810P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-62810 [HIGH] CWE-122 CVE-2026-62810: Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized att
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69592P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69592 [HIGH] CWE-122 CVE-2026-69592: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69436P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69436 [HIGH] CWE-122 CVE-2026-69436: Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elev
Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83990P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-83990 [HIGH] CWE-121 CVE-2026-83990: Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-84000P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-84000 [HIGH] CWE-122 CVE-2026-84000: Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
nvd
CVE-2026-62894P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62894 [HIGH] CWE-122 CVE-2026-62894: Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate priv
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62713P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62713 [HIGH] CWE-122 CVE-2026-62713: Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker t
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62771P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62771 [HIGH] CWE-122 CVE-2026-62771: Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker t
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49793P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-49793 [HIGH] CWE-122 CVE-2026-49793: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
nvd
CVE-2026-58534P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-58534 [HIGH] CWE-122 CVE-2026-58534: Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to e
Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69534P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69534 [HIGH] CWE-77 CVE-2026-69534: Improper neutralization of special elements used in a command ('command injection') in Windows Progr
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd