# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49092.md)
  `CVE-2024-49092` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49091.md)
  `CVE-2024-49091` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.2 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-591
- [Windows Mobile Broadband Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-49087.md)
  `CVE-2024-49087` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-20
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49086.md)
  `CVE-2024-49086` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49085.md)
  `CVE-2024-49085` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption
- [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49073.md)
  `CVE-2024-49073` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-20
- [Windows Task Scheduler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49039.md)
  `CVE-2024-49039` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.14 · Not analysed yet · Published 12 Nov 2024 · Tags: Authentication bypass
- [Active Directory Certificate Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49019.md)
  `CVE-2024-49019` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Authentication bypass
- [Windows Package Library Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-38203.md)
  `CVE-2024-38203` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-693
- [Windows SMB Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-43642.md)
  `CVE-2024-43642` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.63 · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows Registry Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43641.md)
  `CVE-2024-43641` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows KDC Proxy Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43639.md)
  `CVE-2024-43639` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-197
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43636.md)
  `CVE-2024-43636` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43629.md)
  `CVE-2024-43629` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43624.md)
  `CVE-2024-43624` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-43621.md)
  `CVE-2024-43621` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49046.md)
  `CVE-2024-49046` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Race condition
- [Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-38264.md)
  `CVE-2024-38264` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-591
- [Windows Registry Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43452.md)
  `CVE-2024-43452` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.30 · Not analysed yet · Published 12 Nov 2024 · Tags: Race condition
- [NTLM Hash Disclosure Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43451.md)
  `CVE-2024-43451` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.84 · Not analysed yet · Published 12 Nov 2024 · Tags: Path traversal
- [Windows DNS Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43450.md)
  `CVE-2024-43450` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-924
- [Windows USB Video Class System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43449.md)
  `CVE-2024-43449` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows Secure Kernel Mode Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43646.md)
  `CVE-2024-43646` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows Client-Side Caching Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43644.md)
  `CVE-2024-43644` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows USB Video Class System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43643.md)
  `CVE-2024-43643` · CVE record: Microsoft Windows Server 2025 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows Secure Kernel Mode Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43631.md)
  `CVE-2024-43631` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43630.md)
  `CVE-2024-43630` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Microsoft Windows VMSwitch Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-43625.md)
  `CVE-2024-43625` · CVE record: Microsoft Windows Server 2022 and 4 more · CVSS 8.1 High · Not analysed yet · Published 12 Nov 2024 · Tags: Memory corruption
- [Windows Cryptographic Services Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-30098.md)
  `CVE-2024-30098` · CVE record: Microsoft Windows Server 2025 (Server Core installation) and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2024 · Tags: Weak cryptography or TLS
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2023-24932.md)
  `CVE-2023-24932` · CVE record: Microsoft Windows Server 2025 (Server Core installation) and 4 more · CVSS 6.7 Medium · EPSS 0.12 · Not analysed yet · Published 9 May 2023 · Tags: Broken access control
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2020-17103.md)
  `CVE-2020-17103` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.30 · Not analysed yet · Published 9 Dec 2020 · Tags: Privilege escalation
- [WinVerifyTrust Signature Validation Vulnerability](https://agentprime.io/advisories/CVE-2013-3900.md)
  `CVE-2013-3900` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.45 · Not analysed yet · Published 11 Dec 2013 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI0LTEyLTEwVDE3OjQ5OjEzLjM1ODAwMFoiLCJDVkUtMjAyNC00OTA5MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI0LTEyLTEwVDE3OjQ5OjEzLjM1ODAwMFoiLCJDVkUtMjAyNC00OTA5MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.
