Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 89 of 183
CVE-2026-69707P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69707 [HIGH] CWE-190 CVE-2026-69707: Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73002P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-73002 [HIGH] CWE-190 CVE-2026-73002: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69687P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69687 [HIGH] CWE-191 CVE-2026-69687: Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an au
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69535P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69535 [HIGH] CWE-122 CVE-2026-69535: Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privilege
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-77489P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-77489 [HIGH] CWE-476 CVE-2026-77489: Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privi
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69608P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69608 [HIGH] CWE-190 CVE-2026-69608: Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker t
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69822P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69822 [HIGH] CWE-122 CVE-2026-69822: Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges loc
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70581P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-70581 [HIGH] CWE-20 CVE-2026-70581: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69450P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69450 [HIGH] CWE-125 CVE-2026-69450: Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges lo
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69561P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69561 [HIGH] CWE-125 CVE-2026-69561: Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges loca
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70569P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-70569 [HIGH] CWE-125 CVE-2026-70569: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69298P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-69298 [HIGH] CWE-190 CVE-2026-69298: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70574P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-70574 [HIGH] CWE-125 CVE-2026-70574: Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to eleva
Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70572P3HIGHCVSS 7.8fixed in 10.0.26100.33438≥ 10.0.26100.0, < 10.0.26100.334382026-09-08
CVE-2026-70572 [HIGH] CWE-190 CVE-2026-70572: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62737P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62737 [HIGH] CWE-822 CVE-2026-62737: Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62751P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62751 [HIGH] CWE-190 CVE-2026-62751: Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to ele
Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62876P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62876 [HIGH] CWE-125 CVE-2026-62876: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62733P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62733 [HIGH] CWE-125 CVE-2026-62733: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62880P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62880 [HIGH] CWE-125 CVE-2026-62880: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62696P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11
CVE-2026-62696 [HIGH] CWE-191 CVE-2026-62696: Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an
Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd