Microsoft Windows Server 2025 vulnerabilities
3,648 known vulnerabilities affecting microsoft/windows_server_2025.
Total CVEs
3,648
CISA KEV
42
actively exploited
Public exploits
32
Exploited in wild
50
Severity breakdown
CRITICAL131HIGH2617MEDIUM891LOW9
Vulnerabilities
Page 91 of 183
CVE-2026-85338P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85338 [HIGH] CWE-125 CVE-2026-85338: Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileg
Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88070P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88070 [HIGH] CWE-125 CVE-2026-88070: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49733P3HIGHCVSS 7.8fixed in 10.0.26100.4652≥ 10.0.26100.0, < 10.0.26100.46522025-07-08
CVE-2025-49733 [HIGH] CWE-416 CVE-2025-49733: Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-49725P3HIGHCVSS 7.8fixed in 10.0.26100.4652≥ 10.0.26100.0, < 10.0.26100.46522025-07-08
CVE-2025-49725 [HIGH] CWE-416 CVE-2025-49725: Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83670P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83670 [HIGH] CWE-125 CVE-2026-83670: Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disc
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-96918P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96918 [HIGH] CWE-863 CVE-2026-96918: Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83837P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-83837 [HIGH] CWE-441 CVE-2026-83837: Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate priv
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97792P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-97792 [HIGH] CWE-732 CVE-2026-97792: Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85796P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85796 [HIGH] CWE-121 CVE-2026-85796: Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges lo
Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88194P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88194 [HIGH] CWE-125 CVE-2026-88194: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85842P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85842 [HIGH] CWE-134 CVE-2026-85842: Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacke
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88182P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88182 [HIGH] CWE-416 CVE-2026-88182: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88181P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88181 [HIGH] CWE-125 CVE-2026-88181: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85829P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-85829 [HIGH] CWE-415 CVE-2026-85829: Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges
Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88188P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88188 [HIGH] CWE-125 CVE-2026-88188: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96928P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96928 [HIGH] CWE-125 CVE-2026-96928: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96867P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96867 [HIGH] CWE-125 CVE-2026-96867: Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.
nvd
CVE-2026-96862P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-96862 [HIGH] CWE-125 CVE-2026-96862: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88179P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13
CVE-2026-88179 [HIGH] CWE-125 CVE-2026-88179: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-59187P3HIGHCVSS 7.8fixed in 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14
CVE-2025-59187 [HIGH] CWE-20 CVE-2025-59187: Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges loca
Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd