Advisories · Technology

Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-26644 CVE record

CVSS 5.1 Medium

Windows Hello Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-1039
Not analysed yet 8 Apr 2025
CVE-2025-26640 CVE record

CVSS 7.0 High

Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26637 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Apr 2025
CVE-2025-26639 CVE record

CVSS 7.8 High

Windows USB Print Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-24058 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-21203 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-21174 CVE record

CVSS 7.5 High

Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Denial of service
Not analysed yet 8 Apr 2025
CVE-2025-24073 CVE record

CVSS 7.8 High

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-24074 CVE record

CVSS 7.8 High

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 8 Apr 2025
CVE-2025-27740 CVE record

CVSS 8.8 High

Active Directory Certificate Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Authentication bypass
Not analysed yet 8 Apr 2025
CVE-2025-27479 CVE record

CVSS 7.5 High

Kerberos Key Distribution Proxy Service Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-410
Not analysed yet 8 Apr 2025
CVE-2025-27476 CVE record

CVSS 7.8 High

Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27474 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-27470 CVE record

CVSS 7.5 High

Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Denial of service
Not analysed yet 8 Apr 2025
CVE-2025-26680 CVE record

CVSS 7.5 High

Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Denial of service
Not analysed yet 8 Apr 2025
CVE-2025-26681 CVE record

CVSS 6.7 Medium

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26667 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Information disclosure
Not analysed yet 8 Apr 2025
CVE-2025-26666 CVE record

CVSS 7.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Apr 2025
CVE-2025-26664 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- CWE-126
Not analysed yet 8 Apr 2025
CVE-2025-24084 CVE record

CVSS 8.4 High

Windows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24076 CVE record

CVSS 7.3 High

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Broken access control
Not analysed yet 11 Mar 2025
CVE-2025-24071 CVE record

CVSS 6.5 Medium

Microsoft Windows File Explorer Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 11 Mar 2025
CVE-2025-24067 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24066 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24064 CVE record

CVSS 8.1 High

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24061 CVE record

CVSS 7.8 High

Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 11 Mar 2025
CVE-2025-24050 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24048 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24046 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24045 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 11 Mar 2025
CVE-2025-25008 CVE record

CVSS 7.1 High

Windows Server Elevation of Privilege Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Path traversal
Not analysed yet 11 Mar 2025
CVE-2025-24997 CVE record

CVSS 4.4 Medium

DirectX Graphics Kernel File Denial of Service Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-24995 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-26634 CVE record

CVSS 7.5 High

Windows Core Messaging Elevation of Privileges Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Mar 2025
CVE-2025-21414 CVE record

CVSS 7.0 High

Windows Core Messaging Elevation of Privileges Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21254 CVE record

CVSS 6.5 Medium

Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21216 CVE record

CVSS 6.5 Medium

Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21212 CVE record

CVSS 6.5 Medium

Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21184 CVE record

CVSS 7.0 High

Windows Core Messaging Elevation of Privileges Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21179 CVE record

CVSS 4.8 Medium

DHCP Client Service Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21367 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21358 CVE record

CVSS 7.8 High

Windows Core Messaging Elevation of Privileges Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21349 CVE record

CVSS 6.8 Medium

Windows Remote Desktop Configuration Service Tampering Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 11 Feb 2025
CVE-2025-21410 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21208 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21391 CVE record

CVSS 7.1 HighCritical · KEVKEV

Windows Storage Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 11 Feb 2025
CVE-2025-21183 CVE record

CVSS 7.4 High

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21182 CVE record

CVSS 7.4 High

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21379 CVE record

CVSS 7.1 High

DHCP Client Service Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21351 CVE record

CVSS 7.5 High

Windows Active Directory Domain Services API Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 11 Feb 2025
CVE-2025-21325 CVE record

CVSS 7.8 High

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Broken access control
Not analysed yet 17 Jan 2025
CVE-2025-21334 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21333 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21311 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows NTLM V1 Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Authentication bypass
Not analysed yet 14 Jan 2025
CVE-2025-21326 CVE record

CVSS 7.8 High

Internet Explorer Remote Code Execution Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21313 CVE record

CVSS 6.5 Medium

Windows Security Account Manager (SAM) Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21218 CVE record

CVSS 7.5 High

Windows Kerberos Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21372 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21340 CVE record

CVSS 5.5 Medium

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21323 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025