# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [DHCP Server Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-32725.md)
  `CVE-2025-32725` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-693
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24065.md)
  `CVE-2025-24065` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24069.md)
  `CVE-2025-24069` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-24068.md)
  `CVE-2025-24068` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-126
- [Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-47969.md)
  `CVE-2025-47969` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Information disclosure
- [Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-33071.md)
  `CVE-2025-33071` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Task Scheduler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-33067.md)
  `CVE-2025-33067` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.4 High · Not analysed yet · Published 10 Jun 2025 · Tags: Privilege escalation
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33065.md)
  `CVE-2025-33065` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33063.md)
  `CVE-2025-33063` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33062.md)
  `CVE-2025-33062` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33061.md)
  `CVE-2025-33061` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33060.md)
  `CVE-2025-33060` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33059.md)
  `CVE-2025-33059` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33058.md)
  `CVE-2025-33058` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Recovery Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-32721.md)
  `CVE-2025-32721` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.3 High · Not analysed yet · Published 10 Jun 2025 · Tags: Path traversal
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-32720.md)
  `CVE-2025-32720` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-32719.md)
  `CVE-2025-32719` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-32710.md)
  `CVE-2025-32710` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Jun 2025 · Tags: Race condition, Memory corruption
- [Windows Schannel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29828.md)
  `CVE-2025-29828` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Jun 2025 · Tags: Denial of service
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29963.md)
  `CVE-2025-29963` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-29955.md)
  `CVE-2025-29955` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 6.2 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-20
- [UrlMon Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-29842.md)
  `CVE-2025-29842` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 May 2025 · Tags: CWE-349
- [Universal Print Management Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29841.md)
  `CVE-2025-29841` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 May 2025 · Tags: Race condition, Memory corruption
- [Windows ExecutionContext Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29838.md)
  `CVE-2025-29838` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 7.4 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29831.md)
  `CVE-2025-29831` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-29829.md)
  `CVE-2025-29829` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26677.md)
  `CVE-2025-26677` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 May 2025 · Tags: Denial of service
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-30400.md)
  `CVE-2025-30400` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-30394.md)
  `CVE-2025-30394` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 5.9 Medium · EPSS 0.34 · Not analysed yet · Published 13 May 2025 · Tags: CWE-591
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29970.md)
  `CVE-2025-29970` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-29964.md)
  `CVE-2025-29964` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 May 2025 · Tags: Memory corruption
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24062.md)
  `CVE-2025-24062` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24060.md)
  `CVE-2025-24060` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29811.md)
  `CVE-2025-29811` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption, CWE-20
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29812.md)
  `CVE-2025-29812` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-29809.md)
  `CVE-2025-29809` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Information disclosure
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27739.md)
  `CVE-2025-27739` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Power Dependency Coordinator Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-27736.md)
  `CVE-2025-27736` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: Information disclosure
- [Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-27735.md)
  `CVE-2025-27735` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.0 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-345
- [Windows Digital Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27730.md)
  `CVE-2025-27730` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27731.md)
  `CVE-2025-27731` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Windows Kernel-Mode Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27728.md)
  `CVE-2025-27728` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Shell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27729.md)
  `CVE-2025-27729` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Bluetooth Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27490.md)
  `CVE-2025-27490` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27491.md)
  `CVE-2025-27491` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Secure Channel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27492.md)
  `CVE-2025-27492` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Race condition, Memory corruption
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27486.md)
  `CVE-2025-27486` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27482.md)
  `CVE-2025-27482` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-591
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-27480.md)
  `CVE-2025-27480` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-27485.md)
  `CVE-2025-27485` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Digital Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-27467.md)
  `CVE-2025-27467` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Defender Application Control Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-26678.md)
  `CVE-2025-26678` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.4 High · Not analysed yet · Published 8 Apr 2025 · Tags: Broken access control
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26676.md)
  `CVE-2025-26676` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-126
- [Windows Subsystem for Linux Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26675.md)
  `CVE-2025-26675` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26674.md)
  `CVE-2025-26674` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-26671.md)
  `CVE-2025-26671` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Apr 2025 · Tags: Memory corruption, CWE-591
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26652.md)
  `CVE-2025-26652` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2025 · Tags: Denial of service
- [Windows Local Session Manager (LSM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-26651.md)
  `CVE-2025-26651` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-749
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26647.md)
  `CVE-2025-26647` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-20
- [Windows Secure Channel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26649.md)
  `CVE-2025-26649` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2025 · Tags: Race condition, Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI1LTA0LTA4VDE3OjIzOjQ4LjY0MzAwMFoiLCJDVkUtMjAyNS0yNjY0OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI1LTA2LTEwVDE3OjAyOjMwLjY2NzAwMFoiLCJDVkUtMjAyNS0zMzA1MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI1LTA2LTEwVDE3OjAyOjMwLjY2NzAwMFoiLCJDVkUtMjAyNS0zMzA1MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.