# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-50507.md)
  `CVE-2026-50507` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Authentication bypass
- [HTTP.sys Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-49160.md)
  `CVE-2026-49160` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.57 · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-405
- [Windows Media Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-48574.md)
  `CVE-2026-48574` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Boot Manager Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-47656.md)
  `CVE-2026-47656` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42910.md)
  `CVE-2026-42910` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45658.md)
  `CVE-2026-45658` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45654.md)
  `CVE-2026-45654` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45653.md)
  `CVE-2026-45653` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows DHCP Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45608.md)
  `CVE-2026-45608` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Microsoft DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45637.md)
  `CVE-2026-45637` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45603.md)
  `CVE-2026-45603` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45638.md)
  `CVE-2026-45638` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows UPnP Device Host Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45635.md)
  `CVE-2026-45635` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-45602.md)
  `CVE-2026-45602` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-229, CWE-349
- [Windows Kernel-Mode Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45600.md)
  `CVE-2026-45600` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45596.md)
  `CVE-2026-45596` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45636.md)
  `CVE-2026-45636` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption, CWE-20
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45598.md)
  `CVE-2026-45598` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45601.md)
  `CVE-2026-45601` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows UPnP Device Host Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45599.md)
  `CVE-2026-45599` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45597.md)
  `CVE-2026-45597` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Mark of the Web Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45595.md)
  `CVE-2026-45595` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows Managed Installer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45604.md)
  `CVE-2026-45604` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Application Identity (AppID) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45594.md)
  `CVE-2026-45594` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows SDK Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45593.md)
  `CVE-2026-45593` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Internet (wininet.dll) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45592.md)
  `CVE-2026-45592` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45586.md)
  `CVE-2026-45586` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Path traversal
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42828.md)
  `CVE-2026-42828` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-126
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-48583.md)
  `CVE-2026-48583` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48578.md)
  `CVE-2026-48578` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48576.md)
  `CVE-2026-48576` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-1329
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48575.md)
  `CVE-2026-48575` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48573.md)
  `CVE-2026-48573` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-1329
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48570.md)
  `CVE-2026-48570` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-48568.md)
  `CVE-2026-48568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows DWM Core Library Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-48566.md)
  `CVE-2026-48566` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-48563.md)
  `CVE-2026-48563` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47654.md)
  `CVE-2026-47654` · CVE record: Microsoft Windows Server 2016 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47652.md)
  `CVE-2026-47652` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 8.2 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47653.md)
  `CVE-2026-47653` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-47648.md)
  `CVE-2026-47648` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-426
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45588.md)
  `CVE-2026-45588` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.9 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Microsoft Kinect Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41092.md)
  `CVE-2026-41092` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [HTTP.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47291.md)
  `CVE-2026-47291` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.25 · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47289.md)
  `CVE-2026-47289` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Kerberos Key Distribution Center (KDC) Remote Code Execution](https://agentprime.io/advisories/CVE-2026-47288.md)
  `CVE-2026-47288` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 7.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Kernel Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45657.md)
  `CVE-2026-45657` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [UEFI Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45656.md)
  `CVE-2026-45656` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows BitLocker Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-45655.md)
  `CVE-2026-45655` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-693
- [Windows Active Directory Domain Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45648.md)
  `CVE-2026-45648` · CVE record: Microsoft Windows Server 2022 and 2 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-45642.md)
  `CVE-2026-45642` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 3.9 Low · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-20
- [Windows DHCP Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45634.md)
  `CVE-2026-45634` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45641.md)
  `CVE-2026-45641` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 8.4 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45607.md)
  `CVE-2026-45607` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-45606.md)
  `CVE-2026-45606` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Bluetooth Port Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45640.md)
  `CVE-2026-45640` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Bluetooth Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45605.md)
  `CVE-2026-45605` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45487.md)
  `CVE-2026-45487` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-34335.md)
  `CVE-2026-34335` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33828.md)
  `CVE-2026-33828` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-501

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI2LTA2LTA5VDE3OjA0OjI5LjgyMTAwMFoiLCJDVkUtMjAyNi0zMzgyOCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI2LTA2LTA5VDE3OjA1OjU3LjE4MjAwMFoiLCJDVkUtMjAyNi00MjgzNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI2LTA2LTA5VDE3OjA1OjU3LjE4MjAwMFoiLCJDVkUtMjAyNi00MjgzNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.