Advisories · Technology

Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-21317 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21308 CVE record

CVSS 6.5 Medium

Windows Themes Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21292 CVE record

CVSS 8.8 High

Windows Search Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Code injection
Not analysed yet 14 Jan 2025
CVE-2025-21275 CVE record

CVSS 7.8 High

Windows App Package Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21274 CVE record

CVSS 5.5 Medium

Windows Event Tracing Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 14 Jan 2025
CVE-2025-21225 CVE record

CVSS 5.9 Medium

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21224 CVE record

CVSS 8.1 High

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CWE-591
Not analysed yet 14 Jan 2025
CVE-2025-21202 CVE record

CVSS 6.1 Medium

Windows Recovery Environment Agent Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21207 CVE record

CVSS 7.5 High

Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21193 CVE record

CVSS 6.5 Medium

Active Directory Federation Server Spoofing Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Cross-site request forgery (CSRF)
Not analysed yet 14 Jan 2025
CVE-2025-21335 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21330 CVE record

CVSS 7.5 High

Windows Remote Desktop Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21219 CVE record

CVSS 4.3 Medium

MapUrlToZone Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-41
Not analysed yet 14 Jan 2025
CVE-2025-21382 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21316 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21315 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21314 CVE record

CVSS 6.5 Medium

Windows SmartScreen Spoofing Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-451
Not analysed yet 14 Jan 2025
CVE-2025-21309 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 14 Jan 2025
CVE-2025-21301 CVE record

CVSS 6.5 Medium

Windows Geolocation Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21299 CVE record

CVSS 7.1 High

Windows Kerberos Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21297 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21284 CVE record

CVSS 5.5 Medium

Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2025-21280 CVE record

CVSS 5.5 Medium

Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2025-21257 CVE record

CVSS 5.5 Medium

Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21248 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21241 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21239 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21235 CVE record

CVSS 7.8 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2025-21234 CVE record

CVSS 7.8 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2024-49128 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49116 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49114 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-820
Not analysed yet 10 Dec 2024
CVE-2024-49110 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49109 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49095 CVE record

CVSS 7.0 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49083 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49081 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49078 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49077 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49076 CVE record

CVSS 7.8 High

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Authentication bypass
Not analysed yet 10 Dec 2024
CVE-2024-49075 CVE record

CVSS 7.5 High

Windows Remote Desktop Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 10 Dec 2024
CVE-2024-49132 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49129 CVE record

CVSS 7.5 High

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Denial of service
Not analysed yet 10 Dec 2024
CVE-2024-49125 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49123 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49120 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-453
Not analysed yet 10 Dec 2024
CVE-2024-49119 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49117 CVE record

CVSS 8.8 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-393
Not analysed yet 10 Dec 2024
CVE-2024-49115 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49111 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49108 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49107 CVE record

CVSS 7.3 High

WmsRepair Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- Broken access control
Not analysed yet 10 Dec 2024
CVE-2024-49106 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49103 CVE record

CVSS 4.3 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49101 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49099 CVE record

CVSS 4.3 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49098 CVE record

CVSS 4.3 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49097 CVE record

CVSS 7.0 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49094 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49093 CVE record

CVSS 8.8 High

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- CWE-681
Not analysed yet 10 Dec 2024