# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40404.md)
  `CVE-2026-40404` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption, CWE-197
- [Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40409.md)
  `CVE-2026-40409` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-197
- [Windows DNS Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41108.md)
  `CVE-2026-41108` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45585.md)
  `CVE-2026-45585` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 19 May 2026 · Tags: Command injection
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-41097.md)
  `CVE-2026-41097` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 May 2026 · Tags: CWE-1329
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40413.md)
  `CVE-2026-40413` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.4 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40403.md)
  `CVE-2026-40403` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40401.md)
  `CVE-2026-40401` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.1 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40398.md)
  `CVE-2026-40398` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-32209.md)
  `CVE-2026-32209` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: Broken access control
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40397.md)
  `CVE-2026-40397` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40382.md)
  `CVE-2026-40382` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40369.md)
  `CVE-2026-40369` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34341.md)
  `CVE-2026-34341` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34340.md)
  `CVE-2026-34340` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-34339.md)
  `CVE-2026-34339` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34338.md)
  `CVE-2026-34338` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34337.md)
  `CVE-2026-34337` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34336.md)
  `CVE-2026-34336` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34334.md)
  `CVE-2026-34334` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition
- [Windows Kernel-Mode Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-34332.md)
  `CVE-2026-34332` · CVE record: Microsoft Windows Server 2025 and 1 more · CVSS 8.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33838.md)
  `CVE-2026-33838` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Local Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33837.md)
  `CVE-2026-33837` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33835.md)
  `CVE-2026-33835` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42896.md)
  `CVE-2026-42896` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42825.md)
  `CVE-2026-42825` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Rich Text Edit Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-32170.md)
  `CVE-2026-32170` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-32161.md)
  `CVE-2026-32161` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Windows DNS Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-41096.md)
  `CVE-2026-41096` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Data Deduplication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41095.md)
  `CVE-2026-41095` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Netlogon Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-41089.md)
  `CVE-2026-41089` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.78 · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41088.md)
  `CVE-2026-41088` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Path traversal
- [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40415.md)
  `CVE-2026-40415` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40414.md)
  `CVE-2026-40414` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.4 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows SMB Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40410.md)
  `CVE-2026-40410` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows WAN ARP Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40408.md)
  `CVE-2026-40408` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40407.md)
  `CVE-2026-40407` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-40406.md)
  `CVE-2026-40406` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40405.md)
  `CVE-2026-40405` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40399.md)
  `CVE-2026-40399` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40380.md)
  `CVE-2026-40380` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption, CWE-197
- [Microsoft Cryptographic Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-40377.md)
  `CVE-2026-40377` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-35424.md)
  `CVE-2026-35424` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 12 May 2026 · Tags: Denial of service
- [Windows 11 Telnet Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-35423.md)
  `CVE-2026-35423` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Driver Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-35422.md)
  `CVE-2026-35422` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Authentication bypass
- [Windows GDI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-35421.md)
  `CVE-2026-35421` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35420.md)
  `CVE-2026-35420` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows DWM Core Library Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-35419.md)
  `CVE-2026-35419` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35418.md)
  `CVE-2026-35418` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35417.md)
  `CVE-2026-35417` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35416.md)
  `CVE-2026-35416` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-35415.md)
  `CVE-2026-35415` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34351.md)
  `CVE-2026-34351` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition
- [Windows Storport Miniport Driver Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-34350.md)
  `CVE-2026-34350` · CVE record: Microsoft Windows Server 2025 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34347.md)
  `CVE-2026-34347` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34345.md)
  `CVE-2026-34345` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition, Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34344.md)
  `CVE-2026-34344` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34343.md)
  `CVE-2026-34343` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption
- [Windows Print Spooler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34342.md)
  `CVE-2026-34342` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 May 2026 · Tags: Race condition
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34333.md)
  `CVE-2026-34333` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 May 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI2LTA1LTEyVDE2OjU4OjIzLjYwOTAwMFoiLCJDVkUtMjAyNi0zNDMzMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI2LTA2LTA5VDE3OjA0OjI5LjgyMTAwMFoiLCJDVkUtMjAyNi0zMzgyOCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI2LTA2LTA5VDE3OjA0OjI5LjgyMTAwMFoiLCJDVkUtMjAyNi0zMzgyOCJd>. Everything for agents: <https://agentprime.io/llms.txt>.