Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 87 of 183
CVE-2026-88072P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88072 [HIGH] CWE-59 CVE-2026-88072: Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate pr
Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69867P3HIGHCVSS 7.8≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69867 [HIGH] CWE-125 CVE-2026-69867: Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49726P3HIGHCVSS 7.8fixed in 10.0.26100.4652≥ 10.0.26100.0, < 10.0.26100.46522025-07-08
CVE-2025-49726 [HIGH] CWE-416 CVE-2025-49726: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70015P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70015 [HIGH] CWE-122 CVE-2026-70015: Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized at
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83877P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83877 [HIGH] CWE-190 CVE-2026-83877: Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privil
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49785P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-49785 [HIGH] CWE-404 CVE-2026-49785: Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a secu
Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-83570P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83570 [HIGH] CWE-416 CVE-2026-83570: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83508P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83508 [HIGH] CWE-125 CVE-2026-83508: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69934P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69934 [HIGH] CWE-20 CVE-2026-69934: Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate pri
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69957P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69957 [HIGH] CWE-126 CVE-2026-69957: Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate pr
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83567P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83567 [HIGH] CWE-125 CVE-2026-83567: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69952P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-69952 [HIGH] CWE-125 CVE-2026-69952: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59277P3HIGHCVSS 7.8fixed in 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14
CVE-2025-59277 [HIGH] CWE-1287 CVE-2025-59277: Improper validation of specified type of input in Windows Authentication Methods allows an authorize
Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96866P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96866 [HIGH] CWE-125 CVE-2026-96866: Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to de
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-85808P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85808 [HIGH] CWE-125 CVE-2026-85808: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-96861P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96861 [HIGH] CWE-125 CVE-2026-96861: Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to de
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-68896P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-68896 [HIGH] CWE-36 CVE-2026-68896: Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to eleva
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-64673P3HIGHCVSS 7.8fixed in 10.0.26100.7392≥ 10.0.26100.0, < 10.0.26100.74622025-12-09
CVE-2025-64673 [HIGH] CWE-284 CVE-2025-64673: Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges lo
Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-108136P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-108136 [HIGH] CWE-416 CVE-2026-108136: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70228P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-70228 [HIGH] CWE-125 CVE-2026-70228: Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges loc
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd