Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-54116 CVE record

CVSS 7.3 High

Windows MultiPoint Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 9 Sept 2025
CVE-2025-54115 CVE record

CVSS 7.0 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-54114 CVE record

CVSS 7.0 High

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54113 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54112 CVE record

CVSS 7.0 High

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54105 CVE record

CVSS 7.0 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Race condition
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54103 CVE record

CVSS 7.4 High

Windows Management Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54092 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54091 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53807 CVE record

CVSS 7.0 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53806 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-53805 CVE record

CVSS 7.5 High

HTTP.sys Denial of Service Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53804 CVE record

CVSS 5.5 Medium

Windows Kernel-Mode Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 9 Sept 2025
CVE-2025-53803 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 9 Sept 2025
CVE-2025-53802 CVE record

CVSS 7.0 High

Windows Bluetooth Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53801 CVE record

CVSS 7.8 High

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53800 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-1419
Not analysed yet 9 Sept 2025
CVE-2025-53796 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-55236 CVE record

CVSS 7.3 High

Graphics Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-55228 CVE record

CVSS 7.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Race condition
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-55225 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-55223 CVE record

CVSS 7.0 High

DirectX Graphics Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54919 CVE record

CVSS 7.5 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
Not analysed yet 9 Sept 2025
CVE-2025-54913 CVE record

CVSS 7.8 High

Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54111 CVE record

CVSS 7.8 High

Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54106 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54102 CVE record

CVSS 7.8 High

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54101 CVE record

CVSS 4.8 Medium

Windows SMB Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54097 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54096 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-54095 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 9 Sept 2025
CVE-2025-53798 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-53797 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 9 Sept 2025
CVE-2025-49734 CVE record

CVSS 7.0 High

PowerShell Direct Elevation of Privilege Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- CWE-923
Not analysed yet 9 Sept 2025
CVE-2025-55229 CVE record

CVSS 5.3 Medium

Windows Certificate Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Weak cryptography or TLS
Not analysed yet 21 Aug 2025
CVE-2025-48807 CVE record

CVSS 6.7 Medium

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-923
Not analysed yet 12 Aug 2025
CVE-2025-53789 CVE record

CVSS 7.8 High

Windows StateRepository API Server file Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 12 Aug 2025
CVE-2025-50155 CVE record

CVSS 7.8 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50157 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53726 CVE record

CVSS 7.8 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53725 CVE record

CVSS 7.8 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53724 CVE record

CVSS 7.8 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53723 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CWE-197
Not analysed yet 12 Aug 2025
CVE-2025-53721 CVE record

CVSS 7.0 High

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53720 CVE record

CVSS 8.0 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53719 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53716 CVE record

CVSS 6.5 Medium

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53156 CVE record

CVSS 5.5 Medium

Windows Storage Port Driver Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Information disclosure
Not analysed yet 12 Aug 2025
CVE-2025-53155 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53153 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53151 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53148 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53142 CVE record

CVSS 7.0 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53138 CVE record

CVSS 5.7 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-53135 CVE record

CVSS 7.0 High

DirectX Graphics Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 12 Aug 2025
CVE-2025-53131 CVE record

CVSS 8.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50176 CVE record

CVSS 7.8 High

DirectX Graphics Kernel Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 12 Aug 2025
CVE-2025-50172 CVE record

CVSS 6.5 Medium

DirectX Graphics Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 12 Aug 2025
CVE-2025-50171 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Remote Desktop Spoofing Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Broken access control
Not analysed yet 12 Aug 2025
CVE-2025-50170 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-280
Not analysed yet 12 Aug 2025