Microsoft Windows Server 2025 vulnerabilities
1,706 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
1,706
CISA KEV
38
actively exploited
Public exploits
32
Exploited in wild
47
Severity breakdown
CRITICAL40HIGH1216MEDIUM441LOW9
Vulnerabilities
Page 85 of 86
CVE-2026-45642P4LOWCVSS 3.9fixed in 10.0.26100.32995≥ 10.0.26100.0, < 10.0.26100.329952026-06-09
CVE-2026-45642 [LOW] CWE-20 CVE-2026-45642: Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Servi
Improper input validation in Microsoft Azure Attestation service and Device Health Attestation Service allows an authorized attacker to perform spoofing with a physical attack.
nvd
CVE-2025-59280P4LOWCVSS 3.1≤ 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14
CVE-2025-59280 [LOW] CWE-287 CVE-2025-59280: Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering o
Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2025-21179P4MEDIUMCVSS 4.8fixed in 10.0.26100.3107≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21179 [MEDIUM] CWE-125 CVE-2025-21179: DHCP Client Service Denial of Service Vulnerability
DHCP Client Service Denial of Service Vulnerability
nvd
CVE-2025-21210P4MEDIUMCVSS 4.2fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21210 [MEDIUM] CWE-636 CVE-2025-21210: Windows BitLocker Information Disclosure Vulnerability
Windows BitLocker Information Disclosure Vulnerability
nvd
CVE-2025-21214P4MEDIUMCVSS 4.2fixed in 10.0.26100.2894≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21214 [MEDIUM] CWE-200 CVE-2025-21214: Windows BitLocker Information Disclosure Vulnerability
Windows BitLocker Information Disclosure Vulnerability
nvd
CVE-2024-43642HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43642 [HIGH] CWE-416 Windows SMB Denial of Service Vulnerability
Windows SMB Denial of Service Vulnerability
Windows SMB Denial of Service Vulnerability
cvelistv5
CVE-2026-50416P4LOWCVSS 3.3fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-50416 [LOW] CWE-200 CVE-2026-50416: Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized at
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.
nvd
CVE-2025-55695P4LOWCVSS 3.3fixed in 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14
CVE-2025-55695 [LOW] CWE-125 CVE-2025-55695: Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose inf
Out-of-bounds read in Windows WLAN Auto Config Service allows an authorized attacker to disclose information locally.
nvd
CVE-2026-50419P4LOWCVSS 3.3fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-50419 [LOW] CWE-200 CVE-2026-50419: Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized at
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
nvd
CVE-2026-57085P4LOWCVSS 3.3fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14
CVE-2026-57085 [LOW] CWE-125 CVE-2026-57085: Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
nvd
CVE-2025-21377MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.31942025-02-11
CVE-2025-21377 [MEDIUM] CWE-73 NTLM Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability
cvelistv5
CVE-2025-21231HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21231 [HIGH] CWE-400 IP Helper Denial of Service Vulnerability
IP Helper Denial of Service Vulnerability
IP Helper Denial of Service Vulnerability
cvelistv5
CVE-2025-21218HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21218 [HIGH] CWE-400 Windows Kerberos Denial of Service Vulnerability
Windows Kerberos Denial of Service Vulnerability
Windows Kerberos Denial of Service Vulnerability
cvelistv5
CVE-2024-43583HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.26052024-10-08
CVE-2024-43583 [HIGH] CWE-250 Winlogon Elevation of Privilege Vulnerability
Winlogon Elevation of Privilege Vulnerability
Winlogon Elevation of Privilege Vulnerability
cvelistv5
CVE-2024-43636HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43636 [HIGH] CWE-822 Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2025-21338HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21338 [HIGH] CWE-190 GDI+ Remote Code Execution Vulnerability
GDI+ Remote Code Execution Vulnerability
GDI+ Remote Code Execution Vulnerability
cvelistv5
CVE-2025-21296HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21296 [HIGH] CWE-416 BranchCache Remote Code Execution Vulnerability
BranchCache Remote Code Execution Vulnerability
BranchCache Remote Code Execution Vulnerability
cvelistv5
CVE-2024-43450HIGHCVSS 7.5≥ 10.0.26100.0, < 10.0.26100.23142024-11-12
CVE-2024-43450 [HIGH] CWE-924 Windows DNS Spoofing Vulnerability
Windows DNS Spoofing Vulnerability
Windows DNS Spoofing Vulnerability
cvelistv5
CVE-2025-21308MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21308 [MEDIUM] CWE-200 Windows Themes Spoofing Vulnerability
Windows Themes Spoofing Vulnerability
Windows Themes Spoofing Vulnerability
cvelistv5
CVE-2025-21217MEDIUMCVSS 6.5≥ 10.0.26100.0, < 10.0.26100.28942025-01-14
CVE-2025-21217 [MEDIUM] CWE-693 Windows NTLM Spoofing Vulnerability
Windows NTLM Spoofing Vulnerability
Windows NTLM Spoofing Vulnerability
cvelistv5