# Microsoft Windows Server 2022, 23H2 Edition (Server Core installation). Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49674.md) `CVE-2025-49674` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49672.md) `CVE-2025-49672` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption - [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-49671.md) `CVE-2025-49671` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption, Information disclosure - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49670.md) `CVE-2025-49670` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49657.md) `CVE-2025-49657` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-48824.md) `CVE-2025-48824` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption - [Windows Input Method Editor (IME) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47972.md) `CVE-2025-47972` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.0 High · Not analysed yet · Published 8 Jul 2025 · Tags: Race condition - [Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47159.md) `CVE-2025-47159` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-693 - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33055.md) `CVE-2025-33055` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows DWM Core Library Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33052.md) `CVE-2025-33052` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [DHCP Server Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-33050.md) `CVE-2025-33050` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-693 - [DHCP Server Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-32725.md) `CVE-2025-32725` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-693 - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24065.md) `CVE-2025-24065` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24069.md) `CVE-2025-24069` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24068.md) `CVE-2025-24068` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-126 - [Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-33071.md) `CVE-2025-33071` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Shortcut Files Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-47160.md) `CVE-2025-47160` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-693 - [Windows Task Scheduler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-33067.md) `CVE-2025-33067` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.4 High · Not analysed yet · Published 10 Jun 2025 · Tags: Privilege escalation - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33065.md) `CVE-2025-33065` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33063.md) `CVE-2025-33063` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33062.md) `CVE-2025-33062` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33061.md) `CVE-2025-33061` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33060.md) `CVE-2025-33060` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33059.md) `CVE-2025-33059` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33058.md) `CVE-2025-33058` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Port Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-32722.md) `CVE-2025-32722` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Broken access control - [Windows Recovery Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-32721.md) `CVE-2025-32721` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.3 High · Not analysed yet · Published 10 Jun 2025 · Tags: Path traversal - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-32720.md) `CVE-2025-32720` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-32719.md) `CVE-2025-32719` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows SMB Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-32718.md) `CVE-2025-32718` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-32710.md) `CVE-2025-32710` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Jun 2025 · Tags: Race condition, Memory corruption - [Windows Schannel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29828.md) `CVE-2025-29828` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Jun 2025 · Tags: Denial of service - [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29963.md) `CVE-2025-29963` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption - [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-29955.md) `CVE-2025-29955` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-20 - [UrlMon Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-29842.md) `CVE-2025-29842` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 May 2025 · Tags: CWE-349 - [Universal Print Management Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29841.md) `CVE-2025-29841` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 May 2025 · Tags: Race condition, Memory corruption - [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29840.md) `CVE-2025-29840` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption - [Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29833.md) `CVE-2025-29833` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.7 High · Not analysed yet · Published 13 May 2025 · Tags: Race condition - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29831.md) `CVE-2025-29831` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption - [Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-29829.md) `CVE-2025-29829` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption - [Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26677.md) `CVE-2025-26677` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 May 2025 · Tags: Denial of service - [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-30400.md) `CVE-2025-30400` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption - [Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-30394.md) `CVE-2025-30394` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 5.9 Medium · EPSS 0.34 · Not analysed yet · Published 13 May 2025 · Tags: CWE-591 - [Windows Kernel-Mode Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27468.md) `CVE-2025-27468` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 May 2025 · Tags: Privilege escalation - [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29970.md) `CVE-2025-29970` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption - [Active Directory Certificate Services (AD CS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-29968.md) `CVE-2025-29968` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-20 - [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29964.md) `CVE-2025-29964` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption - [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24062.md) `CVE-2025-24062` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20 - [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24060.md) `CVE-2025-24060` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20 - [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29811.md) `CVE-2025-29811` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption, CWE-20 - [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29812.md) `CVE-2025-29812` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-29809.md) `CVE-2025-29809` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Information disclosure - [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27739.md) `CVE-2025-27739` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Resilient File System (ReFS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27738.md) `CVE-2025-27738` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Broken access control - [Windows Power Dependency Coordinator Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27736.md) `CVE-2025-27736` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Information disclosure - [Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-27735.md) `CVE-2025-27735` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-345 - [Windows Digital Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27730.md) `CVE-2025-27730` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27731.md) `CVE-2025-27731` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20 - [Windows Bluetooth Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27490.md) `CVE-2025-27490` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption - [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27491.md) `CVE-2025-27491` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .