Advisories · Technology
Microsoft Windows Server 2025 (Server Core installation).
Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- CWE-841
- CVSS 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 5.1 Medium
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Information disclosure
- CWE-20
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- CWE-841
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-841
- CVSS 7.0 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-841
- CVSS 7.8 High
Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
- CVSS 7.5 High
Windows Connected Devices Platform Service (Cdpsvc) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.7 High
Windows Hello Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Weak cryptography or TLS
- CVSS 7.8 High
Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CVSS 6.3 Medium
Virtual Secure Mode Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-324
- CVSS 7.5 High
Remote Procedure Call Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
- CVSS 2.1 Low
Windows Taskbar Live Preview Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
- CVSS 7.8 High
Windows Bluetooth Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 3.3 Low
Windows NTLM Spoofing Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Information disclosure
- CVSS 5.5 Medium
Microsoft Failover Cluster Information Disclosure Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows Server 2025
- Information disclosure
- CVSS 6.2 Medium
Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Information disclosure
- CVSS 6.5 Medium
Windows Local Session Manager (LSM) Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- CWE-1287
- CVSS 7.8 High
Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CVSS 9.9 CriticalCritical · CVSS 9+
Microsoft Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
- CVSS 7.4 High
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 5.5 Medium
Windows Management Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.7 High
Data Sharing Service Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- Race condition
- CVSS 7.8 High
Software Protection Platform (SPP) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
- CVSS 7.0 High
Windows Graphics Component Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 5.5 Medium
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Information disclosure
- CVSS 6.5 Medium
NTLM Hash Disclosure Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- CVSS 7.8 High
Windows Bluetooth Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 4.7 Medium
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 8.8 High
Windows Speech Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
- CVSS 8.8 High
Windows Speech Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
- CVSS 7.0 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.0 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.0 High
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.0 High
Desktop Window Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Windows Device Association Broker Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 5.5 Medium
Windows USB Video Class System Driver Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Information disclosure
- CVSS 7.0 High
Windows Remote Desktop Protocol Security Feature Bypass
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Authentication bypass
- CVSS 7.8 High
Windows Network Driver Interface Specification (NDIS) Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
- CWE-1310
- CVSS 5.5 Medium
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Information disclosure
- CVSS 6.1 Medium
Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-1023
- CVSS 5.5 Medium
Windows Storage Management Provider Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
- CVSS 7.0 High
Windows Device Association Broker Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 7.4 High
Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
- CVSS 7.0 High
Windows Bluetooth Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Race condition
- Memory corruption
- CVSS 7.0 High
Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Race condition
- Memory corruption
- CVSS 7.0 High
Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Memory corruption
- CVSS 7.8 High
Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.3 High
Windows MultiPoint Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
- CVSS 7.0 High
Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 7.0 High
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 8.8 High
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
- CVSS 7.0 High
Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption