Advisories · Technology

Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-49092 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49091 CVE record

CVSS 7.2 High

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49087 CVE record

CVSS 4.6 Medium

Windows Mobile Broadband Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 10 Dec 2024
CVE-2024-49086 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49085 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49073 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 10 Dec 2024
CVE-2024-49039 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Nov 2024
CVE-2024-49019 CVE record

CVSS 7.8 High

Active Directory Certificate Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Nov 2024
CVE-2024-38203 CVE record

CVSS 6.2 Medium

Windows Package Library Manager Information Disclosure Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- CWE-693
Not analysed yet 12 Nov 2024
CVE-2024-43642 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows SMB Denial of Service Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43641 CVE record

CVSS 7.8 High

Windows Registry Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43639 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows KDC Proxy Remote Code Execution Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- CWE-197
Not analysed yet 12 Nov 2024
CVE-2024-43636 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43629 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43624 CVE record

CVSS 8.8 High

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43621 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49046 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Nov 2024
CVE-2024-38264 CVE record

CVSS 5.9 Medium

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- CWE-591
Not analysed yet 12 Nov 2024
CVE-2024-43452 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Registry Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Nov 2024
CVE-2024-43451 CVE record

CVSS 6.5 MediumCritical · KEVKEV

NTLM Hash Disclosure Spoofing Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Path traversal
Not analysed yet 12 Nov 2024
CVE-2024-43450 CVE record

CVSS 7.5 High

Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-924
Not analysed yet 12 Nov 2024
CVE-2024-43449 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43646 CVE record

CVSS 6.7 Medium

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43644 CVE record

CVSS 7.8 High

Windows Client-Side Caching Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43643 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43631 CVE record

CVSS 6.7 Medium

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43630 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43625 CVE record

CVSS 8.1 High

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 22H2
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-30098 CVE record

CVSS 7.5 High

Windows Cryptographic Services Security Feature Bypass Vulnerability
- Microsoft Windows Server 2025 (Server Core installation)
- Microsoft Windows 11 Version 24H2
- Weak cryptography or TLS
Not analysed yet 9 Jul 2024
CVE-2023-24932 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows Server 2025 (Server Core installation)
- Microsoft Windows 11 Version 24H2
- Broken access control
Not analysed yet 9 May 2023
CVE-2020-17103 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 11 version 23H2
- Privilege escalation
Not analysed yet 9 Dec 2020
CVE-2013-3900 CVE record

CVSS 5.5 MediumCritical · KEVKEV

WinVerifyTrust Signature Validation Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 11 Dec 2013