# Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Print Spooler Components Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85327.md)
  `CVE-2026-85327` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Active Directory Federation Services (AD FS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-85324.md)
  `CVE-2026-85324` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Network Device Enrollment Service (NDES) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-85323.md)
  `CVE-2026-85323` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85322.md)
  `CVE-2026-85322` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Active Directory Federation Services (AD FS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-85321.md)
  `CVE-2026-85321` · CVE record: Microsoft Windows Server 2012 R2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Active Directory Federation Services (AD FS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-85319.md)
  `CVE-2026-85319` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Windows Print Spooler Components Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85320.md)
  `CVE-2026-85320` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Servicing Stack Updates Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85318.md)
  `CVE-2026-85318` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84020.md)
  `CVE-2026-84020` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84019.md)
  `CVE-2026-84019` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Print Spooler Components Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84018.md)
  `CVE-2026-84018` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-84017.md)
  `CVE-2026-84017` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows EAPHost Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84016.md)
  `CVE-2026-84016` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-84015.md)
  `CVE-2026-84015` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84014.md)
  `CVE-2026-84014` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, Race condition
- [Windows Telephony Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-84013.md)
  `CVE-2026-84013` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows SMB Client Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-84011.md)
  `CVE-2026-84011` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-84012.md)
  `CVE-2026-84012` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Remote Desktop Gateway Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-84007.md)
  `CVE-2026-84007` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Projected File System Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-84009.md)
  `CVE-2026-84009` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition
- [Windows Imaging Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69886.md)
  `CVE-2026-69886` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows GDI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83929.md)
  `CVE-2026-83929` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Group Policy Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83932.md)
  `CVE-2026-83932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Registry Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83927.md)
  `CVE-2026-83927` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83928.md)
  `CVE-2026-83928` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Hello Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-83926.md)
  `CVE-2026-83926` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS
- [Windows Direct Composition Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83922.md)
  `CVE-2026-83922` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Search Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83920.md)
  `CVE-2026-83920` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Internet Messaging API Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83919.md)
  `CVE-2026-83919` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Search Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83921.md)
  `CVE-2026-83921` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows ALPC Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83917.md)
  `CVE-2026-83917` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Error Reporting Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83916.md)
  `CVE-2026-83916` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft XML Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83914.md)
  `CVE-2026-83914` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85841.md)
  `CVE-2026-85841` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Shell Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-83906.md)
  `CVE-2026-83906` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Direct Composition Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83912.md)
  `CVE-2026-83912` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Update Orchestrator Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83886.md)
  `CVE-2026-83886` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83871.md)
  `CVE-2026-83871` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, Race condition
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83911.md)
  `CVE-2026-83911` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83769.md)
  `CVE-2026-83769` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Internet Explorer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83741.md)
  `CVE-2026-83741` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83586.md)
  `CVE-2026-83586` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [HID Parser Library Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83569.md)
  `CVE-2026-83569` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Bind Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70299.md)
  `CVE-2026-70299` · CVE record: Microsoft Windows 11 version 23H2 and 3 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70286.md)
  `CVE-2026-70286` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows CD-ROM File System Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70275.md)
  `CVE-2026-70275` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-70248.md)
  `CVE-2026-70248` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70243.md)
  `CVE-2026-70243` · CVE record: Microsoft Windows 11 version 23H2 and 3 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70241.md)
  `CVE-2026-70241` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Win32 Kernel Subsystem Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83909.md)
  `CVE-2026-83909` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70222.md)
  `CVE-2026-70222` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft OpenSSH for Windows Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-70163.md)
  `CVE-2026-70163` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [Windows Direct Composition Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70151.md)
  `CVE-2026-70151` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [HID Parser Library Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70128.md)
  `CVE-2026-70128` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows GDI Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70089.md)
  `CVE-2026-70089` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70086.md)
  `CVE-2026-70086` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Direct Composition Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83896.md)
  `CVE-2026-83896` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Clipboard User Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83893.md)
  `CVE-2026-83893` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [Windows Human Interface Device Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83892.md)
  `CVE-2026-83892` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-83885.md)
  `CVE-2026-83885` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 5.6 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation.md?cursor=WyIyMDI2LTEwLTEzVDE4OjU5OjU1LjU5NzAwMFoiLCJDVkUtMjAyNi04Mzg4NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025-server-core-installation&cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjAxLjg1MTAwMFoiLCJDVkUtMjAyNi04NTMzMSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025-server-core-installation/?cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjAxLjg1MTAwMFoiLCJDVkUtMjAyNi04NTMzMSJd>. Everything for agents: <https://agentprime.io/llms.txt>.