# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Hello Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-26644.md)
  `CVE-2025-26644` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.1 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-1039
- [Windows Digital Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26640.md)
  `CVE-2025-26640` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-26637.md)
  `CVE-2025-26637` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-693
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26639.md)
  `CVE-2025-26639` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24058.md)
  `CVE-2025-24058` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21203.md)
  `CVE-2025-21203` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21174.md)
  `CVE-2025-21174` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24073.md)
  `CVE-2025-24073` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24074.md)
  `CVE-2025-24074` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Active Directory Certificate Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27740.md)
  `CVE-2025-27740` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Authentication bypass
- [Kerberos Key Distribution Proxy Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27479.md)
  `CVE-2025-27479` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-410
- [Windows Digital Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27476.md)
  `CVE-2025-27476` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27474.md)
  `CVE-2025-27474` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27470.md)
  `CVE-2025-27470` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26680.md)
  `CVE-2025-26680` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26681.md)
  `CVE-2025-26681` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26667.md)
  `CVE-2025-26667` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Information disclosure
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26666.md)
  `CVE-2025-26666` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26664.md)
  `CVE-2025-26664` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126
- [Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24084.md)
  `CVE-2025-24084` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 8.4 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24076.md)
  `CVE-2025-24076` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.3 High · Not analysed yet · Published 11 Mar 2025 · Tags: Broken access control
- [Microsoft Windows File Explorer Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-24071.md)
  `CVE-2025-24071` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · EPSS 0.23 · Not analysed yet · Published 11 Mar 2025 · Tags: Information disclosure
- [Kernel Streaming Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24067.md)
  `CVE-2025-24067` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Kernel Streaming Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24066.md)
  `CVE-2025-24066` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24064.md)
  `CVE-2025-24064` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-24061.md)
  `CVE-2025-24061` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-693
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24050.md)
  `CVE-2025-24050` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24048.md)
  `CVE-2025-24048` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Kernel Streaming Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24046.md)
  `CVE-2025-24046` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-24045.md)
  `CVE-2025-24045` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-591
- [Windows Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-25008.md)
  `CVE-2025-25008` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.1 High · Not analysed yet · Published 11 Mar 2025 · Tags: Path traversal
- [DirectX Graphics Kernel File Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-24997.md)
  `CVE-2025-24997` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24995.md)
  `CVE-2025-24995` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privileges Vulnerability](https://agentprime.io/advisories/CVE-2025-26634.md)
  `CVE-2025-26634` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2025 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privileges Vulnerability](https://agentprime.io/advisories/CVE-2025-21414.md)
  `CVE-2025-21414` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21254.md)
  `CVE-2025-21254` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21216.md)
  `CVE-2025-21216` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Internet Connection Sharing (ICS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21212.md)
  `CVE-2025-21212` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privileges Vulnerability](https://agentprime.io/advisories/CVE-2025-21184.md)
  `CVE-2025-21184` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [DHCP Client Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21179.md)
  `CVE-2025-21179` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 4.8 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21367.md)
  `CVE-2025-21367` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privileges Vulnerability](https://agentprime.io/advisories/CVE-2025-21358.md)
  `CVE-2025-21358` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Remote Desktop Configuration Service Tampering Vulnerability](https://agentprime.io/advisories/CVE-2025-21349.md)
  `CVE-2025-21349` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: Authentication bypass
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21410.md)
  `CVE-2025-21410` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21208.md)
  `CVE-2025-21208` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21391.md)
  `CVE-2025-21391` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Feb 2025 · Tags: Path traversal
- [Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21183.md)
  `CVE-2025-21183` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 7.4 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21182.md)
  `CVE-2025-21182` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 7.4 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [DHCP Client Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21379.md)
  `CVE-2025-21379` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 7.1 High · Not analysed yet · Published 11 Feb 2025 · Tags: Memory corruption
- [Windows Active Directory Domain Services API Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21351.md)
  `CVE-2025-21351` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Feb 2025 · Tags: Denial of service
- [Windows Secure Kernel Mode Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21325.md)
  `CVE-2025-21325` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 17 Jan 2025 · Tags: Broken access control
- [Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21334.md)
  `CVE-2025-21334` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21333.md)
  `CVE-2025-21333` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.10 · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows NTLM V1 Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21311.md)
  `CVE-2025-21311` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jan 2025 · Tags: Authentication bypass
- [Internet Explorer Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21326.md)
  `CVE-2025-21326` · CVE record: Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) and 2 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Security Account Manager (SAM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21313.md)
  `CVE-2025-21313` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Denial of service
- [Windows Kerberos Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21218.md)
  `CVE-2025-21218` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Denial of service
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21372.md)
  `CVE-2025-21372` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption
- [Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21340.md)
  `CVE-2025-21340` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control
- [Windows Kernel Memory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21323.md)
  `CVE-2025-21323` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI1LTAxLTE0VDE4OjA0OjM3Ljg4ODAwMFoiLCJDVkUtMjAyNS0yMTMyMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI1LTA0LTA4VDE3OjIzOjQ4LjY0MzAwMFoiLCJDVkUtMjAyNS0yNjY0OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI1LTA0LTA4VDE3OjIzOjQ4LjY0MzAwMFoiLCJDVkUtMjAyNS0yNjY0OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.