# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [DNS Client Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-49174.md)
  `CVE-2026-49174` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Authentication bypass
- [Windows FTP Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-49172.md)
  `CVE-2026-49172` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows DNS Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49175.md)
  `CVE-2026-49175` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows WalletService Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49176.md)
  `CVE-2026-49176` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Path traversal, Privilege escalation
- [Windows Speech Runtime Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49171.md)
  `CVE-2026-49171` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows StateRepository API Server file Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49170.md)
  `CVE-2026-49170` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Broken access control, CWE-1220
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-49169.md)
  `CVE-2026-49169` · CVE record: Microsoft Windows Server 2025 and 1 more · CVSS 8.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Storage Spaces Direct Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49168.md)
  `CVE-2026-49168` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49167.md)
  `CVE-2026-49167` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Print Configuration Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49166.md)
  `CVE-2026-49166` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Windows App Store Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-49165.md)
  `CVE-2026-49165` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Domain Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-49164.md)
  `CVE-2026-49164` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Brokering File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49162.md)
  `CVE-2026-49162` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows App Package Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-48571.md)
  `CVE-2026-48571` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows App Package Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-48572.md)
  `CVE-2026-48572` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [SQL Server ODBC driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42990.md)
  `CVE-2026-42990` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Bluetooth Port Driver Remote Code Execution](https://agentprime.io/advisories/CVE-2026-42975.md)
  `CVE-2026-42975` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Windows App Store Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42900.md)
  `CVE-2026-42900` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-34346.md)
  `CVE-2026-34346` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Weak cryptography or TLS
- [Windows Media Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-34349.md)
  `CVE-2026-34349` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Windows Secure Kernel Mode Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42982.md)
  `CVE-2026-42982` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-1288
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-42993.md)
  `CVE-2026-42993` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Deployment Services (WDS) Remote Code Execution](https://agentprime.io/advisories/CVE-2026-42987.md)
  `CVE-2026-42987` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-44802.md)
  `CVE-2026-44802` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42983.md)
  `CVE-2026-42983` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows DHCP Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-44815.md)
  `CVE-2026-44815` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Network Controller (NC) Host Agent Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-44805.md)
  `CVE-2026-44805` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-42992.md)
  `CVE-2026-42992` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Microsoft Cryptographic Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-44810.md)
  `CVE-2026-44810` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 8.4 High · Not analysed yet · Published 9 Jun 2026 · Tags: Authentication bypass
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-44809.md)
  `CVE-2026-44809` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Winlogon Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42989.md)
  `CVE-2026-42989` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Path traversal
- [Windows Push Notifications Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42991.md)
  `CVE-2026-42991` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows Push Notifications Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42979.md)
  `CVE-2026-42979` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows Push Notifications Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42977.md)
  `CVE-2026-42977` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Windows Push Notifications Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42978.md)
  `CVE-2026-42978` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Microsoft Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42986.md)
  `CVE-2026-42986` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Performance Monitor Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-42974.md)
  `CVE-2026-42974` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Performance Monitor Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-42981.md)
  `CVE-2026-42981` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42984.md)
  `CVE-2026-42984` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Push Notification Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42973.md)
  `CVE-2026-42973` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows Push Notification Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42970.md)
  `CVE-2026-42970` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows Push Notification Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42971.md)
  `CVE-2026-42971` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows Push Notification Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42969.md)
  `CVE-2026-42969` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Hyper-V Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42972.md)
  `CVE-2026-42972` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows Telephony Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42968.md)
  `CVE-2026-42968` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Microsoft Windows VMSwitch Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-42915.md)
  `CVE-2026-42915` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Kerberos Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-42914.md)
  `CVE-2026-42914` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Telephony Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42912.md)
  `CVE-2026-42912` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-42913.md)
  `CVE-2026-42913` · CVE record: Microsoft Remote Desktop client for Windows Desktop and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption
- [Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42911.md)
  `CVE-2026-42911` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [NT OS Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42916.md)
  `CVE-2026-42916` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [NT OS Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42980.md)
  `CVE-2026-42980` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42908.md)
  `CVE-2026-42908` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Shell Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42907.md)
  `CVE-2026-42907` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows Shell Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-42906.md)
  `CVE-2026-42906` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure
- [Windows DWM Core Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42905.md)
  `CVE-2026-42905` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42904.md)
  `CVE-2026-42904` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Kerberos Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-42903.md)
  `CVE-2026-42903` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42837.md)
  `CVE-2026-42837` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption
- [Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-42836.md)
  `CVE-2026-42836` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 9 Jun 2026 · Tags: Race condition, Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI2LTA2LTA5VDE3OjA1OjU3LjE4MjAwMFoiLCJDVkUtMjAyNi00MjgzNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI2LTA3LTE0VDE3OjA0OjMzLjIyNDAwMFoiLCJDVkUtMjAyNi00OTE3NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI2LTA3LTE0VDE3OjA0OjMzLjIyNDAwMFoiLCJDVkUtMjAyNi00OTE3NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.