# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-108136.md)
  `CVE-2026-108136` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-108132.md)
  `CVE-2026-108132` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Active Directory Federation Services (AD FS) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-108131.md)
  `CVE-2026-108131` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-108130.md)
  `CVE-2026-108130` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-108129.md)
  `CVE-2026-108129` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-108128.md)
  `CVE-2026-108128` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-108127.md)
  `CVE-2026-108127` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97844.md)
  `CVE-2026-97844` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97843.md)
  `CVE-2026-97843` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97842.md)
  `CVE-2026-97842` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97841.md)
  `CVE-2026-97841` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97840.md)
  `CVE-2026-97840` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97839.md)
  `CVE-2026-97839` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97838.md)
  `CVE-2026-97838` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97837.md)
  `CVE-2026-97837` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97836.md)
  `CVE-2026-97836` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97835.md)
  `CVE-2026-97835` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97834.md)
  `CVE-2026-97834` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97833.md)
  `CVE-2026-97833` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97832.md)
  `CVE-2026-97832` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97831.md)
  `CVE-2026-97831` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Internet Information Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-97830.md)
  `CVE-2026-97830` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97829.md)
  `CVE-2026-97829` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97828.md)
  `CVE-2026-97828` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-126
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97827.md)
  `CVE-2026-97827` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97826.md)
  `CVE-2026-97826` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97825.md)
  `CVE-2026-97825` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97824.md)
  `CVE-2026-97824` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97823.md)
  `CVE-2026-97823` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97822.md)
  `CVE-2026-97822` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97821.md)
  `CVE-2026-97821` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97820.md)
  `CVE-2026-97820` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97819.md)
  `CVE-2026-97819` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Role: DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97817.md)
  `CVE-2026-97817` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft OpenSSH for Windows Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97816.md)
  `CVE-2026-97816` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Error Reporting Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97815.md)
  `CVE-2026-97815` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Text Shaping Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97814.md)
  `CVE-2026-97814` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Hyper-V Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-97813.md)
  `CVE-2026-97813` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Update Orchestrator Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-97812.md)
  `CVE-2026-97812` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-97811.md)
  `CVE-2026-97811` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service, Memory corruption
- [Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-97810.md)
  `CVE-2026-97810` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Partition Management Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-97805.md)
  `CVE-2026-97805` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-20
- [HID Class Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-97804.md)
  `CVE-2026-97804` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96113.md)
  `CVE-2026-96113` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-197
- [Windows Error Reporting Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-97798.md)
  `CVE-2026-97798` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection
- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-105010.md)
  `CVE-2026-105010` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Server Update Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-105009.md)
  `CVE-2026-105009` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Windows Schannel Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-105008.md)
  `CVE-2026-105008` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass, CWE-420
- [Windows NDIS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-105007.md)
  `CVE-2026-105007` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [HID Class Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-105006.md)
  `CVE-2026-105006` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Overlay Filter Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-105004.md)
  `CVE-2026-105004` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [HID Class Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-105003.md)
  `CVE-2026-105003` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft QUIC Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-103577.md)
  `CVE-2026-103577` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-453
- [Active Directory Federation Services (AD FS) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-103576.md)
  `CVE-2026-103576` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Open redirect
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-103575.md)
  `CVE-2026-103575` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows IKE Extension Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-103569.md)
  `CVE-2026-103569` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Credential Providers Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-103568.md)
  `CVE-2026-103568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, Race condition
- [Role: DNS Server Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-103560.md)
  `CVE-2026-103560` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-103558.md)
  `CVE-2026-103558` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-103555.md)
  `CVE-2026-103555` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI2LTEwLTEzVDE5OjAxOjM1Ljc0OTAwMFoiLCJDVkUtMjAyNi0xMDM1NTUiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/>. Everything for agents: <https://agentprime.io/llms.txt>.