Advisories · Technology

Microsoft Windows Server 2008 R2 Service Pack 1.

Every CVE that names Microsoft Windows Server 2008 R2 Service Pack 1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-58739 CVE record

CVSS 6.5 Medium

Microsoft Windows File Explorer Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Oct 2025
CVE-2025-58736 CVE record

CVSS 7.0 High

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58733 CVE record

CVSS 7.0 High

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58730 CVE record

CVSS 7.0 High

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58729 CVE record

CVSS 6.5 Medium

Windows Local Session Manager (LSM) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-1287
Not analysed yet 14 Oct 2025
CVE-2025-58726 CVE record

CVSS 7.5 High

Windows SMB Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Oct 2025
CVE-2025-58725 CVE record

CVSS 7.0 High

Windows COM+ Event System Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58718 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58714 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Oct 2025
CVE-2025-55695 CVE record

CVSS 5.5 Medium

Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-55678 CVE record

CVSS 7.0 High

DirectX Graphics Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-25004 CVE record

CVSS 7.3 High

PowerShell Elevation of Privilege Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- Broken access control
Not analysed yet 14 Oct 2025
CVE-2025-59295 CVE record

CVSS 8.8 High

Windows URL Parsing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-59282 CVE record

CVSS 7.0 High

Internet Information Services (IIS) Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-59280 CVE record

CVSS 3.1 Low

Windows SMB Client Tampering Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 14 Oct 2025
CVE-2025-59277 CVE record

CVSS 7.8 High

Windows Authentication Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-1287
Not analysed yet 14 Oct 2025
CVE-2025-59242 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-59201 CVE record

CVSS 7.8 High

Network Connection Status Indicator (NCSI) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Oct 2025
CVE-2025-59196 CVE record

CVSS 7.0 High

Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58735 CVE record

CVSS 7.0 High

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58732 CVE record

CVSS 7.0 High

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-58717 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-55701 CVE record

CVSS 7.8 High

Windows Authentication Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-1287
Not analysed yet 14 Oct 2025
CVE-2025-55700 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-55335 CVE record

CVSS 7.4 High

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-24052 CVE record

CVSS 7.8 High

Windows Agere Modem Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-24990 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Agere Modem Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Oct 2025
CVE-2025-55234 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows SMB Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 9 Sept 2025
CVE-2025-54917 CVE record

CVSS 4.3 Medium

MapUrlToZone Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 9 Sept 2025
CVE-2025-54915 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54912 CVE record

CVSS 7.8 High

Windows BitLocker Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54911 CVE record

CVSS 7.3 High

Windows BitLocker Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54113 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54109 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54107 CVE record

CVSS 4.3 Medium

MapUrlToZone Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-41
Not analysed yet 9 Sept 2025
CVE-2025-54104 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54098 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-54094 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54093 CVE record

CVSS 7.0 High

Windows TCP/IP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-53810 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53808 CVE record

CVSS 6.7 Medium

Windows Defender Firewall Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53806 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-53799 CVE record

CVSS 5.5 Medium

Windows Imaging Component Information Disclosure Vulnerability
- Microsoft Office for Android
- Microsoft Windows 10 Version 1507
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53796 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-55226 CVE record

CVSS 6.7 Medium

Graphics Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-55225 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54918 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows NTLM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 9 Sept 2025
CVE-2025-54916 CVE record

CVSS 7.8 High

Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54895 CVE record

CVSS 7.8 High

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-54894 CVE record

CVSS 7.8 High

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54110 CVE record

CVSS 8.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54099 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54097 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54096 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54095 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53798 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-53797 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-55230 CVE record

CVSS 7.8 High

Windows MBT Transport Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 21 Aug 2025
CVE-2025-53778 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows NTLM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 12 Aug 2025
CVE-2025-50157 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025