# Microsoft Windows Server 2025 (Server Core installation). Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Windows Kernel Memory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21317.md) `CVE-2025-21317` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure - [Windows Themes Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21308.md) `CVE-2025-21308` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure - [Windows Search Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21292.md) `CVE-2025-21292` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Code injection - [Windows App Package Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21275.md) `CVE-2025-21275` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control - [Windows Event Tracing Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21274.md) `CVE-2025-21274` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Path traversal - [Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21225.md) `CVE-2025-21225` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21224.md) `CVE-2025-21224` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption, CWE-591 - [Windows Recovery Environment Agent Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21202.md) `CVE-2025-21202` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control - [Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21207.md) `CVE-2025-21207` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Denial of service - [Active Directory Federation Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21193.md) `CVE-2025-21193` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Cross-site request forgery (CSRF) - [Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21335.md) `CVE-2025-21335` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Windows Remote Desktop Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21330.md) `CVE-2025-21330` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jan 2025 · Tags: Denial of service - [MapUrlToZone Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21219.md) `CVE-2025-21219` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-41 - [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21382.md) `CVE-2025-21382` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Windows Kernel Memory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21316.md) `CVE-2025-21316` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure - [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21315.md) `CVE-2025-21315` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Windows SmartScreen Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21314.md) `CVE-2025-21314` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-451 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21309.md) `CVE-2025-21309` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-591 - [Windows Geolocation Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21301.md) `CVE-2025-21301` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Broken access control - [Windows Kerberos Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-21299.md) `CVE-2025-21299` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Jan 2025 · Tags: Information disclosure - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21297.md) `CVE-2025-21297` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Windows Virtual Trusted Platform Module Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21284.md) `CVE-2025-21284` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-20 - [Windows Virtual Trusted Platform Module Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-21280.md) `CVE-2025-21280` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-20 - [Windows WLAN AutoConfig Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-21257.md) `CVE-2025-21257` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21248.md) `CVE-2025-21248` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21241.md) `CVE-2025-21241` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Windows Telephony Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-21239.md) `CVE-2025-21239` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: Memory corruption - [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21235.md) `CVE-2025-21235` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-20 - [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21234.md) `CVE-2025-21234` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-20 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49128.md) `CVE-2024-49128` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49116.md) `CVE-2024-49116` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49114.md) `CVE-2024-49114` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-820 - [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49110.md) `CVE-2024-49110` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49109.md) `CVE-2024-49109` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49095.md) `CVE-2024-49095` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49083.md) `CVE-2024-49083` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49081.md) `CVE-2024-49081` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49078.md) `CVE-2024-49078` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Mobile Broadband Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49077.md) `CVE-2024-49077` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49076.md) `CVE-2024-49076` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: Authentication bypass - [Windows Remote Desktop Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-49075.md) `CVE-2024-49075` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Dec 2024 · Tags: Denial of service - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49132.md) `CVE-2024-49132` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2024-49129.md) `CVE-2024-49129` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Dec 2024 · Tags: Denial of service - [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49125.md) `CVE-2024-49125` · CVE record: Microsoft Windows Server 2008 Service Pack 2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49123.md) `CVE-2024-49123` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-591 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49120.md) `CVE-2024-49120` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-453 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49119.md) `CVE-2024-49119` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49117.md) `CVE-2024-49117` · CVE record: Microsoft Windows 11 version 22H2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-393 - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49115.md) `CVE-2024-49115` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49111.md) `CVE-2024-49111` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49108.md) `CVE-2024-49108` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [WmsRepair Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49107.md) `CVE-2024-49107` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.3 High · Not analysed yet · Published 10 Dec 2024 · Tags: Path traversal, Broken access control - [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-49106.md) `CVE-2024-49106` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-49103.md) `CVE-2024-49103` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49101.md) `CVE-2024-49101` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-49099.md) `CVE-2024-49099` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2024-49098.md) `CVE-2024-49098` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49097.md) `CVE-2024-49097` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption, CWE-591 - [Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49094.md) `CVE-2024-49094` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 10 Dec 2024 · Tags: Memory corruption - [Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-49093.md) `CVE-2024-49093` · CVE record: Microsoft Windows 11 Version 24H2 and 2 more · CVSS 8.8 High · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-681 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .