# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Remote Desktop Licensing Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26160.md)
  `CVE-2026-26160` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Authentication bypass
- [Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-26155.md)
  `CVE-2026-26155` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-126
- [Windows Server Update Service (WSUS) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-26154.md)
  `CVE-2026-26154` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-20
- [Remote Desktop Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-26151.md)
  `CVE-2026-26151` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-357
- [Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-23670.md)
  `CVE-2026-23670` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Memory corruption
- [Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25184.md)
  `CVE-2026-25184` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Apr 2026 · Tags: Race condition
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20930.md)
  `CVE-2026-20930` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Apr 2026 · Tags: Race condition
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26132.md)
  `CVE-2026-26132` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25170.md)
  `CVE-2026-25170` · CVE record: Microsoft Windows 11 version 22H3 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-25167.md)
  `CVE-2026-25167` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24296.md)
  `CVE-2026-24296` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Race condition
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24295.md)
  `CVE-2026-24295` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Race condition, Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24293.md)
  `CVE-2026-24293` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Connected Devices Platform Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24292.md)
  `CVE-2026-24292` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24290.md)
  `CVE-2026-24290` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Broken access control
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24289.md)
  `CVE-2026-24289` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24287.md)
  `CVE-2026-24287` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Path traversal
- [Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-24283.md)
  `CVE-2026-24283` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Mar 2026 · Tags: Memory corruption
- [Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-23671.md)
  `CVE-2026-23671` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Mar 2026 · Tags: Race condition, Memory corruption
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-21222.md)
  `CVE-2026-21222` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: Information disclosure
- [Windows HTTP.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21232.md)
  `CVE-2026-21232` · CVE record: Microsoft Windows 11 version 22H3 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Subsystem for Linux Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21237.md)
  `CVE-2026-21237` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Feb 2026 · Tags: Race condition, Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21239.md)
  `CVE-2026-21239` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21241.md)
  `CVE-2026-21241` · CVE record: Microsoft Windows 11 version 22H3 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows HTTP.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21240.md)
  `CVE-2026-21240` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Race condition
- [Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-21243.md)
  `CVE-2026-21243` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 7.5 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-21244.md)
  `CVE-2026-21244` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.3 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21245.md)
  `CVE-2026-21245` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows NTLM Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-21249.md)
  `CVE-2026-21249` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 3.3 Low · EPSS 0.11 · Not analysed yet · Published 10 Feb 2026 · Tags: Path traversal
- [Windows HTTP.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21250.md)
  `CVE-2026-21250` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Cluster Client Failover (CCF) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21251.md)
  `CVE-2026-21251` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Hyper-V Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-21255.md)
  `CVE-2026-21255` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Broken access control
- [Windows Connected Devices Platform Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21234.md)
  `CVE-2026-21234` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Feb 2026 · Tags: Race condition
- [Windows Subsystem for Linux Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21242.md)
  `CVE-2026-21242` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21246.md)
  `CVE-2026-21246` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-21247.md)
  `CVE-2026-21247` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.3 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption, CWE-20
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-21248.md)
  `CVE-2026-21248` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.3 High · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Desktop Window Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21519.md)
  `CVE-2026-21519` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 10 Feb 2026 · Tags: Memory corruption
- [Host Process for Windows Tasks Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20941.md)
  `CVE-2026-20941` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Path traversal
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20939.md)
  `CVE-2026-20939` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20937.md)
  `CVE-2026-20937` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20874.md)
  `CVE-2026-20874` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20873.md)
  `CVE-2026-20873` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Desktop Window Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20871.md)
  `CVE-2026-20871` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20870.md)
  `CVE-2026-20870` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20867.md)
  `CVE-2026-20867` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20866.md)
  `CVE-2026-20866` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20863.md)
  `CVE-2026-20863` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows Management Services Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20862.md)
  `CVE-2026-20862` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20861.md)
  `CVE-2026-20861` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20854.md)
  `CVE-2026-20854` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20848.md)
  `CVE-2026-20848` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21221.md)
  `CVE-2026-21221` · CVE record: Microsoft Windows 11 Version 24H2 and 3 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20830.md)
  `CVE-2026-20830` · CVE record: Microsoft Windows Server 2025 and 1 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20934.md)
  `CVE-2026-20934` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20932.md)
  `CVE-2026-20932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Jan 2026 · Tags: Information disclosure
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20926.md)
  `CVE-2026-20926` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20924.md)
  `CVE-2026-20924` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition, Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20923.md)
  `CVE-2026-20923` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Jan 2026 · Tags: Memory corruption
- [Windows SMB Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-20919.md)
  `CVE-2026-20919` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Jan 2026 · Tags: Race condition

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI2LTAxLTEzVDE3OjU2OjM4LjE5NjAwMFoiLCJDVkUtMjAyNi0yMDkxOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI2LTA0LTE0VDE2OjU3OjAxLjM2MzAwMFoiLCJDVkUtMjAyNi0yNjE2MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI2LTA0LTE0VDE2OjU3OjAxLjM2MzAwMFoiLCJDVkUtMjAyNi0yNjE2MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.