Advisories · Technology

Microsoft Windows Server 2022.

Every CVE that names Microsoft Windows Server 2022 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49760 CVE record

CVSS 3.5 Low

Windows Storage Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-49753 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49735 CVE record

CVSS 8.1 High

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49726 CVE record

CVSS 7.8 High

Windows Notification Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49723 CVE record

CVSS 8.8 High

Windows StateRepository API Server file Tampering Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-49716 CVE record

CVSS 7.5 High

Windows Netlogon Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Denial of service
Not analysed yet 8 Jul 2025
CVE-2025-47991 CVE record

CVSS 7.8 High

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49691 CVE record

CVSS 8.0 High

Windows Miracast Wireless Display Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49690 CVE record

CVSS 7.4 High

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49688 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49687 CVE record

CVSS 8.8 High

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49676 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49674 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49672 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49671 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- Information disclosure
Not analysed yet 8 Jul 2025
CVE-2025-49670 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49657 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48824 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47972 CVE record

CVSS 8.0 High

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 8 Jul 2025
CVE-2025-47159 CVE record

CVSS 7.8 High

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Jul 2025
CVE-2025-33070 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Netlogon Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33068 CVE record

CVSS 7.5 High

Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Denial of service
Not analysed yet 10 Jun 2025
CVE-2025-33055 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33052 CVE record

CVSS 5.5 Medium

Windows DWM Core Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33050 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- CWE-693
Not analysed yet 10 Jun 2025
CVE-2025-32725 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- CWE-693
Not analysed yet 10 Jun 2025
CVE-2025-24065 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-24069 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-24068 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 10 Jun 2025
CVE-2025-33071 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-47160 CVE record

CVSS 5.4 Medium

Windows Shortcut Files Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 10 Jun 2025
CVE-2025-33067 CVE record

CVSS 8.4 High

Windows Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Privilege escalation
Not analysed yet 10 Jun 2025
CVE-2025-33065 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33063 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33062 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33061 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33060 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33059 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33058 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-32722 CVE record

CVSS 5.5 Medium

Windows Storage Port Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 10 Jun 2025
CVE-2025-32721 CVE record

CVSS 7.3 High

Windows Recovery Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 10 Jun 2025
CVE-2025-32720 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-32719 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-32718 CVE record

CVSS 7.8 High

Windows SMB Client Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-32710 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Race condition
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-29828 CVE record

CVSS 8.1 High

Windows Schannel Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Denial of service
Not analysed yet 10 Jun 2025
CVE-2025-29963 CVE record

CVSS 8.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29842 CVE record

CVSS 7.5 High

UrlMon Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-349
Not analysed yet 13 May 2025
CVE-2025-29841 CVE record

CVSS 7.0 High

Universal Print Management Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Race condition
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29840 CVE record

CVSS 8.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29835 CVE record

CVSS 6.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29833 CVE record

CVSS 7.7 High

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 13 May 2025
CVE-2025-29831 CVE record

CVSS 7.5 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-29829 CVE record

CVSS 5.5 Medium

Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-26677 CVE record

CVSS 7.5 High

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Denial of service
Not analysed yet 13 May 2025
CVE-2025-30400 CVE record

CVSS 7.8 HighCritical · KEVKEV

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 May 2025
CVE-2025-30394 CVE record

CVSS 5.9 Medium

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 13 May 2025
CVE-2025-27468 CVE record

CVSS 7.0 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Privilege escalation
Not analysed yet 13 May 2025
CVE-2025-29968 CVE record

CVSS 6.5 Medium

Active Directory Certificate Services (AD CS) Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-20
Not analysed yet 13 May 2025
CVE-2025-29964 CVE record

CVSS 8.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 May 2025