Microsoft Windows Server 2025 vulnerabilities

3,648 known vulnerabilities affecting microsoft/windows_server_2025.

Total CVEs

3,648

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL131HIGH2617MEDIUM891LOW9

Vulnerabilities

SortPage 92 of 183

CVE-2026-65773P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11

CVE-2026-65773 [HIGH] CWE-284 CVE-2026-65773: Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locall Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50343P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14

CVE-2026-50343 [HIGH] CWE-269 CVE-2026-50343: Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-50423P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14

CVE-2026-50423 [HIGH] CWE-284 CVE-2026-50423: Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locall Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-40409P3HIGHCVSS 7.8fixed in 10.0.26100.32995≥ 10.0.26100.0, < 10.0.26100.329952026-06-09

CVE-2026-40409 [HIGH] CWE-197 CVE-2026-40409: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

nvd

CVE-2026-27907P3HIGHCVSS 7.8fixed in 10.0.26100.32690≥ 10.0.26100.0, < 10.0.26100.326902026-04-14

CVE-2026-27907 [HIGH] CWE-191 CVE-2026-27907: Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized att Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-45592P3HIGHCVSS 7.8fixed in 10.0.26100.32995≥ 10.0.26100.0, < 10.0.26100.329952026-06-09

CVE-2026-45592 [HIGH] CWE-190 CVE-2026-45592: Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to el Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26153P3HIGHCVSS 7.8fixed in 10.0.26100.32690≥ 10.0.26100.0, < 10.0.26100.326902026-04-14

CVE-2026-26153 [HIGH] CWE-125 CVE-2026-26153: Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-42896P3HIGHCVSS 7.8fixed in 10.0.26100.32860≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-42896 [HIGH] CWE-122 CVE-2026-42896: Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-85321P3HIGHCVSS 7.5fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13

CVE-2026-85321 [HIGH] CWE-770 CVE-2026-85321: Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

nvd

CVE-2026-50491P3HIGHCVSS 7.8fixed in 10.0.26100.33158≥ 10.0.26100.0, < 10.0.26100.331582026-07-14

CVE-2026-50491 [HIGH] CWE-125 CVE-2026-50491: Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privilege Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59278P3HIGHCVSS 7.8fixed in 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14

CVE-2025-59278 [HIGH] CWE-1287 CVE-2025-59278: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-59275P3HIGHCVSS 7.8fixed in 10.0.26100.6899≥ 10.0.26100.0, < 10.0.26100.68992025-10-14

CVE-2025-59275 [HIGH] CWE-122 CVE-2025-59275: Improper validation of specified type of input in Windows Authentication Methods allows an authorize Improper validation of specified type of input in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-33834P3HIGHCVSS 7.8fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-33834 [HIGH] CWE-284 CVE-2026-33834: Improper access control in Windows Event Logging Service allows an authorized attacker to elevate pr Improper access control in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-83741P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13

CVE-2026-83741 [HIGH] CWE-416 CVE-2026-83741: Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.

nvd

CVE-2025-29831P3HIGHCVSS 7.5fixed in 10.0.26100.4061≥ 10.0.26100.0, < 10.0.26100.40612025-05-13

CVE-2025-29831 [HIGH] CWE-416 CVE-2025-29831: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-61349P3HIGHCVSS 7.8fixed in 10.0.26100.33222≥ 10.0.26100.0, < 10.0.26100.332962026-08-11

CVE-2026-61349 [HIGH] CWE-362 CVE-2026-61349: Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges lo Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-26183P3HIGHCVSS 7.8fixed in 10.0.26100.32690≥ 10.0.26100.0, < 10.0.26100.326902026-04-14

CVE-2026-26183 [HIGH] CWE-284 CVE-2026-26183: Improper access control in Windows RPC API allows an authorized attacker to elevate privileges local Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-69650P3HIGHCVSS 7.8fixed in 10.0.26100.33650≥ 10.0.26100.0, < 10.0.26100.336502026-10-13

CVE-2026-69650 [HIGH] CWE-347 CVE-2026-69650: Improper verification of cryptographic signature in Windows Key Distribution Center allows an author Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-34338P3HIGHCVSS 7.8fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-34338 [HIGH] CWE-416 CVE-2026-34338: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

nvd

CVE-2026-40382P3HIGHCVSS 7.8fixed in 10.0.26100.32772≥ 10.0.26100.0, < 10.0.26100.328602026-05-12

CVE-2026-40382 [HIGH] CWE-416 CVE-2026-40382: Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges loca Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

nvd

← Previous92 / 183Next →