# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows SmartScreen Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-49740.md)
  `CVE-2025-49740` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-693
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-47999.md)
  `CVE-2025-47999` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-820
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49733.md)
  `CVE-2025-49733` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49729.md)
  `CVE-2025-49729` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Notification Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49725.md)
  `CVE-2025-49725` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Connected Devices Platform Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49724.md)
  `CVE-2025-49724` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49693.md)
  `CVE-2025-49693` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Storage Port Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-49684.md)
  `CVE-2025-49684` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-126
- [Windows Media Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49682.md)
  `CVE-2025-49682` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.3 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-49681.md)
  `CVE-2025-49681` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Performance Recorder (WPR) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-49680.md)
  `CVE-2025-49680` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.3 High · Not analysed yet · Published 8 Jul 2025 · Tags: Path traversal
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49673.md)
  `CVE-2025-49673` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49669.md)
  `CVE-2025-49669` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49668.md)
  `CVE-2025-49668` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49666.md)
  `CVE-2025-49666` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.2 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49663.md)
  `CVE-2025-49663` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Event Tracing Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49660.md)
  `CVE-2025-49660` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Cryptographic Services Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-48823.md)
  `CVE-2025-48823` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Weak cryptography or TLS, CWE-310
- [Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-48822.md)
  `CVE-2025-48822` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.6 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows AppX Deployment Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-48820.md)
  `CVE-2025-48820` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Path traversal
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-48818.md)
  `CVE-2025-48818` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Race condition
- [Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-48811.md)
  `CVE-2025-48811` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-353
- [Windows Secure Kernel Mode Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-48810.md)
  `CVE-2025-48810` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1037
- [Windows Secure Kernel Mode Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-48809.md)
  `CVE-2025-48809` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1037
- [Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-48803.md)
  `CVE-2025-48803` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-353
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-48800.md)
  `CVE-2025-48800` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-693
- [Windows Update Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-48799.md)
  `CVE-2025-48799` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Path traversal
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-48003.md)
  `CVE-2025-48003` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-693
- [Windows Hyper-V Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-48002.md)
  `CVE-2025-48002` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 5.7 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Connected Devices Platform Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-48000.md)
  `CVE-2025-48000` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Race condition, Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-47998.md)
  `CVE-2025-47998` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Storage VSP Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47982.md)
  `CVE-2025-47982` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption, CWE-20
- [Windows Kerberos Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-47978.md)
  `CVE-2025-47978` · CVE record: Microsoft Windows Server 2022 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Storage Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-49760.md)
  `CVE-2025-49760` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 3.5 Low · Not analysed yet · Published 8 Jul 2025 · Tags: Path traversal
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49753.md)
  `CVE-2025-49753` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49735.md)
  `CVE-2025-49735` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Notification Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49726.md)
  `CVE-2025-49726` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows StateRepository API Server file Tampering Vulnerability](https://agentprime.io/advisories/CVE-2025-49723.md)
  `CVE-2025-49723` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Broken access control
- [Microsoft PC Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47993.md)
  `CVE-2025-47993` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Broken access control
- [Windows Input Method Editor (IME) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47991.md)
  `CVE-2025-47991` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49694.md)
  `CVE-2025-49694` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Miracast Wireless Display Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49691.md)
  `CVE-2025-49691` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.0 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49690.md)
  `CVE-2025-49690` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.4 High · Not analysed yet · Published 8 Jul 2025 · Tags: Race condition, Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49688.md)
  `CVE-2025-49688` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49676.md)
  `CVE-2025-49676` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49674.md)
  `CVE-2025-49674` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49672.md)
  `CVE-2025-49672` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-49671.md)
  `CVE-2025-49671` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption, Information disclosure
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49670.md)
  `CVE-2025-49670` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49657.md)
  `CVE-2025-49657` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-48824.md)
  `CVE-2025-48824` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption
- [Windows Input Method Editor (IME) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47972.md)
  `CVE-2025-47972` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.0 High · Not analysed yet · Published 8 Jul 2025 · Tags: Race condition
- [Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-47159.md)
  `CVE-2025-47159` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-693
- [Remote Desktop Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-33054.md)
  `CVE-2025-33054` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-357
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-26636.md)
  `CVE-2025-26636` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-1037
- [Windows App Control for Business Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-33069.md)
  `CVE-2025-33069` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 5.1 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Weak cryptography or TLS
- [Windows Standards-Based Storage Management Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-33068.md)
  `CVE-2025-33068` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2025 · Tags: Denial of service
- [Windows Storage Management Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33055.md)
  `CVE-2025-33055` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [Windows DWM Core Library Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33052.md)
  `CVE-2025-33052` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: Memory corruption
- [DHCP Server Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-33050.md)
  `CVE-2025-33050` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-693

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI1LTA2LTEwVDE3OjAyOjMwLjY2NzAwMFoiLCJDVkUtMjAyNS0zMzA1MCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI1LTA3LTA4VDE2OjU4OjE4LjE5MTAwMFoiLCJDVkUtMjAyNS00OTc0NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI1LTA3LTA4VDE2OjU4OjE4LjE5MTAwMFoiLCJDVkUtMjAyNS00OTc0NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.