# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54108.md)
  `CVE-2025-54108` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition, Memory corruption
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54105.md)
  `CVE-2025-54105` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition, Memory corruption
- [Windows Management Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54103.md)
  `CVE-2025-54103` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.4 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54092.md)
  `CVE-2025-54092` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition, Memory corruption
- [Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-53809.md)
  `CVE-2025-53809` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-20
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53807.md)
  `CVE-2025-53807` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition, Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-53806.md)
  `CVE-2025-53806` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption, CWE-126
- [HTTP.sys Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-53805.md)
  `CVE-2025-53805` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Bluetooth Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53802.md)
  `CVE-2025-53802` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53800.md)
  `CVE-2025-53800` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-1419
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-53796.md)
  `CVE-2025-53796` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-126
- [Graphics Kernel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-55236.md)
  `CVE-2025-55236` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.3 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition, Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-55228.md)
  `CVE-2025-55228` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition, Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-55225.md)
  `CVE-2025-55225` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-55223.md)
  `CVE-2025-55223` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition, Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-54919.md)
  `CVE-2025-54919` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition
- [Windows UI XAML Maps MapControlSettings Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54913.md)
  `CVE-2025-54913` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Race condition, Memory corruption
- [Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54111.md)
  `CVE-2025-54111` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-54106.md)
  `CVE-2025-54106` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Connected Devices Platform Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-54102.md)
  `CVE-2025-54102` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-54097.md)
  `CVE-2025-54097` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-54096.md)
  `CVE-2025-54096` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-54095.md)
  `CVE-2025-54095` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-53798.md)
  `CVE-2025-53798` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-126
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-53797.md)
  `CVE-2025-53797` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-126
- [PowerShell Direct Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49734.md)
  `CVE-2025-49734` · CVE record: Microsoft PowerShell 7.4 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-923
- [Windows Storage-based Management Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-55231.md)
  `CVE-2025-55231` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 21 Aug 2025 · Tags: Race condition
- [Windows Certificate Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-55229.md)
  `CVE-2025-55229` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 21 Aug 2025 · Tags: Weak cryptography or TLS
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-48807.md)
  `CVE-2025-48807` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-923
- [Windows StateRepository API Server file Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53789.md)
  `CVE-2025-53789` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Authentication bypass
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53779.md)
  `CVE-2025-53779` · CVE record: Microsoft Windows Server 2025 and 1 more · CVSS 7.2 High · Not analysed yet · Published 12 Aug 2025 · Tags: Path traversal
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-50157.md)
  `CVE-2025-50157` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Connected Devices Platform Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53721.md)
  `CVE-2025-53721` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-53720.md)
  `CVE-2025-53720` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.0 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-53719.md)
  `CVE-2025-53719` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-53716.md)
  `CVE-2025-53716` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Storage Port Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-53156.md)
  `CVE-2025-53156` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Information disclosure
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-53153.md)
  `CVE-2025-53153` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53151.md)
  `CVE-2025-53151` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-53148.md)
  `CVE-2025-53148` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53142.md)
  `CVE-2025-53142` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-53138.md)
  `CVE-2025-53138` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [DirectX Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53135.md)
  `CVE-2025-53135` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Aug 2025 · Tags: Race condition
- [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53133.md)
  `CVE-2025-53133` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 7.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-53131.md)
  `CVE-2025-53131` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [DirectX Graphics Kernel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-50176.md)
  `CVE-2025-50176` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [DirectX Graphics Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-50172.md)
  `CVE-2025-50172` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Denial of service
- [Remote Desktop Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-50171.md)
  `CVE-2025-50171` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2025 · Tags: Broken access control
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-50170.md)
  `CVE-2025-50170` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-280
- [Windows SMB Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-50169.md)
  `CVE-2025-50169` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2025 · Tags: Race condition, Memory corruption
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-50168.md)
  `CVE-2025-50168` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-50165.md)
  `CVE-2025-50165` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-50164.md)
  `CVE-2025-50164` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.0 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-50163.md)
  `CVE-2025-50163` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-50162.md)
  `CVE-2025-50162` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.0 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-50160.md)
  `CVE-2025-50160` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.0 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-50156.md)
  `CVE-2025-50156` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-49757.md)
  `CVE-2025-49757` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 Aug 2025 · Tags: Memory corruption
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-49751.md)
  `CVE-2025-49751` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-820
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-49744.md)
  `CVE-2025-49744` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Jul 2025 · Tags: Memory corruption, Race condition

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI1LTA3LTA4VDE2OjU4OjE4LjE5MTAwMFoiLCJDVkUtMjAyNS00OTc0NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI1LTA5LTA5VDE3OjAxOjI0LjIzMDAwMFoiLCJDVkUtMjAyNS01NDExMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI1LTA5LTA5VDE3OjAxOjI0LjIzMDAwMFoiLCJDVkUtMjAyNS01NDExMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.