Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-50168 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50167 CVE record

CVSS 7.0 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50164 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50163 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50162 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50160 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50159 CVE record

CVSS 7.3 High

Remote Access Point-to-Point Protocol (PPP) EAP-TLS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50156 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49757 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-49751 CVE record

CVSS 6.8 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-820
Not analysed yet 12 Aug 2025
CVE-2025-49744 CVE record

CVSS 7.0 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- Race condition
Not analysed yet 8 Jul 2025
CVE-2025-49740 CVE record

CVSS 8.8 High

Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Jul 2025
CVE-2025-47999 CVE record

CVSS 6.8 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-820
Not analysed yet 8 Jul 2025
CVE-2025-49733 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49729 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49725 CVE record

CVSS 7.8 High

Windows Notification Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49724 CVE record

CVSS 8.8 High

Windows Connected Devices Platform Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49693 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49685 CVE record

CVSS 7.0 High

Windows Search Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49684 CVE record

CVSS 5.5 Medium

Windows Storage Port Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Jul 2025
CVE-2025-49682 CVE record

CVSS 7.3 High

Windows Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49681 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49680 CVE record

CVSS 7.3 High

Windows Performance Recorder (WPR) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-49673 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49669 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49668 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49666 CVE record

CVSS 7.2 High

Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49665 CVE record

CVSS 7.8 High

Workspace Broker Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49663 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49660 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48823 CVE record

CVSS 5.9 Medium

Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Weak cryptography or TLS
- CWE-310
Not analysed yet 8 Jul 2025
CVE-2025-48822 CVE record

CVSS 8.6 High

Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48820 CVE record

CVSS 7.8 High

Windows AppX Deployment Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-48818 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 8 Jul 2025
CVE-2025-48814 CVE record

CVSS 7.5 High

Remote Desktop Licensing Service Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Authentication bypass
Not analysed yet 8 Jul 2025
CVE-2025-48811 CVE record

CVSS 6.7 Medium

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-353
Not analysed yet 8 Jul 2025
CVE-2025-48804 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-349
Not analysed yet 8 Jul 2025
CVE-2025-48803 CVE record

CVSS 6.7 Medium

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-353
Not analysed yet 8 Jul 2025
CVE-2025-48802 CVE record

CVSS 6.5 Medium

Windows SMB Server Spoofing Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Weak cryptography or TLS
Not analysed yet 8 Jul 2025
CVE-2025-48800 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Jul 2025
CVE-2025-48003 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-693
Not analysed yet 8 Jul 2025
CVE-2025-48001 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 8 Jul 2025
CVE-2025-48000 CVE record

CVSS 7.8 High

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47998 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47982 CVE record

CVSS 7.8 High

Windows Storage VSP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-20
Not analysed yet 8 Jul 2025
CVE-2025-47978 CVE record

CVSS 6.5 Medium

Windows Kerberos Denial of Service Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49760 CVE record

CVSS 3.5 Low

Windows Storage Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-49753 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49735 CVE record

CVSS 8.1 High

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49726 CVE record

CVSS 7.8 High

Windows Notification Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49723 CVE record

CVSS 8.8 High

Windows StateRepository API Server file Tampering Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-49716 CVE record

CVSS 7.5 High

Windows Netlogon Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Denial of service
Not analysed yet 8 Jul 2025
CVE-2025-47993 CVE record

CVSS 7.8 High

Microsoft PC Manager Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-47991 CVE record

CVSS 7.8 High

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49694 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49691 CVE record

CVSS 8.0 High

Windows Miracast Wireless Display Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49690 CVE record

CVSS 7.4 High

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49688 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49687 CVE record

CVSS 8.8 High

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49676 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025