Advisories · Technology

Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49740 CVE record

CVSS 8.8 High

Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Jul 2025
CVE-2025-47999 CVE record

CVSS 6.8 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-820
Not analysed yet 8 Jul 2025
CVE-2025-49733 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49729 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49725 CVE record

CVSS 7.8 High

Windows Notification Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49724 CVE record

CVSS 8.8 High

Windows Connected Devices Platform Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49693 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49684 CVE record

CVSS 5.5 Medium

Windows Storage Port Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Jul 2025
CVE-2025-49682 CVE record

CVSS 7.3 High

Windows Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49681 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49680 CVE record

CVSS 7.3 High

Windows Performance Recorder (WPR) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-49673 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49669 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49668 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49666 CVE record

CVSS 7.2 High

Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49663 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49660 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48823 CVE record

CVSS 5.9 Medium

Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Weak cryptography or TLS
- CWE-310
Not analysed yet 8 Jul 2025
CVE-2025-48822 CVE record

CVSS 8.6 High

Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48820 CVE record

CVSS 7.8 High

Windows AppX Deployment Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-48818 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 8 Jul 2025
CVE-2025-48811 CVE record

CVSS 6.7 Medium

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-353
Not analysed yet 8 Jul 2025
CVE-2025-48810 CVE record

CVSS 5.5 Medium

Windows Secure Kernel Mode Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- CWE-1037
Not analysed yet 8 Jul 2025
CVE-2025-48809 CVE record

CVSS 5.5 Medium

Windows Secure Kernel Mode Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- CWE-1037
Not analysed yet 8 Jul 2025
CVE-2025-48803 CVE record

CVSS 6.7 Medium

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-353
Not analysed yet 8 Jul 2025
CVE-2025-48800 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Jul 2025
CVE-2025-48799 CVE record

CVSS 7.8 High

Windows Update Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-48003 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-693
Not analysed yet 8 Jul 2025
CVE-2025-48002 CVE record

CVSS 5.7 Medium

Windows Hyper-V Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48000 CVE record

CVSS 7.8 High

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47998 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47982 CVE record

CVSS 7.8 High

Windows Storage VSP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-20
Not analysed yet 8 Jul 2025
CVE-2025-47978 CVE record

CVSS 6.5 Medium

Windows Kerberos Denial of Service Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49760 CVE record

CVSS 3.5 Low

Windows Storage Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Jul 2025
CVE-2025-49753 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49735 CVE record

CVSS 8.1 High

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49726 CVE record

CVSS 7.8 High

Windows Notification Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49723 CVE record

CVSS 8.8 High

Windows StateRepository API Server file Tampering Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-47993 CVE record

CVSS 7.8 High

Microsoft PC Manager Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Broken access control
Not analysed yet 8 Jul 2025
CVE-2025-47991 CVE record

CVSS 7.8 High

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49694 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49691 CVE record

CVSS 8.0 High

Windows Miracast Wireless Display Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49690 CVE record

CVSS 7.4 High

Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49688 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49676 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49674 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49672 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49671 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- Information disclosure
Not analysed yet 8 Jul 2025
CVE-2025-49670 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-49657 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-48824 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 8 Jul 2025
CVE-2025-47972 CVE record

CVSS 8.0 High

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 8 Jul 2025
CVE-2025-47159 CVE record

CVSS 7.8 High

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Jul 2025
CVE-2025-33054 CVE record

CVSS 8.1 High

Remote Desktop Spoofing Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-357
Not analysed yet 8 Jul 2025
CVE-2025-26636 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- CWE-1037
Not analysed yet 8 Jul 2025
CVE-2025-33069 CVE record

CVSS 5.1 Medium

Windows App Control for Business Security Feature Bypass Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Weak cryptography or TLS
Not analysed yet 10 Jun 2025
CVE-2025-33068 CVE record

CVSS 7.5 High

Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Denial of service
Not analysed yet 10 Jun 2025
CVE-2025-33055 CVE record

CVSS 5.5 Medium

Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33052 CVE record

CVSS 5.5 Medium

Windows DWM Core Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Jun 2025
CVE-2025-33050 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- CWE-693
Not analysed yet 10 Jun 2025