Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-27492 CVE record

CVSS 7.0 High

Windows Secure Channel Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Race condition
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27482 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-27480 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27467 CVE record

CVSS 7.8 High

Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26678 CVE record

CVSS 8.4 High

Windows Defender Application Control Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
Not analysed yet 8 Apr 2025
CVE-2025-26676 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-26675 CVE record

CVSS 7.8 High

Windows Subsystem for Linux Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26674 CVE record

CVSS 7.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26671 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 8 Apr 2025
CVE-2025-26651 CVE record

CVSS 6.5 Medium

Windows Local Session Manager (LSM) Denial of Service Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-749
Not analysed yet 8 Apr 2025
CVE-2025-26647 CVE record

CVSS 8.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-26649 CVE record

CVSS 7.0 High

Windows Secure Channel Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Race condition
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26640 CVE record

CVSS 7.0 High

Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26637 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Apr 2025
CVE-2025-26635 CVE record

CVSS 6.5 Medium

Windows Hello Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Authentication bypass
Not analysed yet 8 Apr 2025
CVE-2025-26639 CVE record

CVSS 7.8 High

Windows USB Print Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-24058 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-21203 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-24073 CVE record

CVSS 7.8 High

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-24074 CVE record

CVSS 7.8 High

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-27740 CVE record

CVSS 8.8 High

Active Directory Certificate Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Authentication bypass
Not analysed yet 8 Apr 2025
CVE-2025-27479 CVE record

CVSS 7.5 High

Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-410
Not analysed yet 8 Apr 2025
CVE-2025-27476 CVE record

CVSS 7.8 High

Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27474 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26688 CVE record

CVSS 7.8 High

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26681 CVE record

CVSS 6.7 Medium

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26667 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Information disclosure
Not analysed yet 8 Apr 2025
CVE-2025-26666 CVE record

CVSS 7.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26664 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-24984 CVE record

CVSS 4.6 MediumCritical · KEVKEV

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 11 Mar 2025
CVE-2025-24084 CVE record

CVSS 8.4 High

Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24076 CVE record

CVSS 7.3 High

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Broken access control
Not analysed yet 11 Mar 2025
CVE-2025-24071 CVE record

CVSS 6.5 Medium

Microsoft Windows File Explorer Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 11 Mar 2025
CVE-2025-24067 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24066 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24064 CVE record

CVSS 8.1 High

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24061 CVE record

CVSS 7.8 High

Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 11 Mar 2025
CVE-2025-24050 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24048 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24046 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24045 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 11 Mar 2025
CVE-2025-25008 CVE record

CVSS 7.1 High

Windows Server Elevation of Privilege Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Path traversal
Not analysed yet 11 Mar 2025
CVE-2025-24997 CVE record

CVSS 4.4 Medium

DirectX Graphics Kernel File Denial of Service Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24995 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24044 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-26634 CVE record

CVSS 7.5 High

Windows Core Messaging Elevation of Privileges Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-21414 CVE record

CVSS 7.0 High

Windows Core Messaging Elevation of Privileges Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21254 CVE record

CVSS 6.5 Medium

Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21216 CVE record

CVSS 6.5 Medium

Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21212 CVE record

CVSS 6.5 Medium

Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21184 CVE record

CVSS 7.0 High

Windows Core Messaging Elevation of Privileges Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21367 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21358 CVE record

CVSS 7.8 High

Windows Core Messaging Elevation of Privileges Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21349 CVE record

CVSS 6.8 Medium

Windows Remote Desktop Configuration Service Tampering Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 11 Feb 2025
CVE-2025-21347 CVE record

CVSS 6.0 Medium

Windows Deployment Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 11 Feb 2025
CVE-2025-21410 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21208 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21420 CVE record

CVSS 7.8 High

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 11 Feb 2025
CVE-2025-21391 CVE record

CVSS 7.1 HighCritical · KEVKEV

Windows Storage Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 11 Feb 2025
CVE-2025-21351 CVE record

CVSS 7.5 High

Windows Active Directory Domain Services API Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 11 Feb 2025