Advisories · Technology
Microsoft Windows Server 2025 (Server Core installation).
Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Remote Desktop Licensing Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Authentication bypass
- CVSS 6.5 Medium
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
- CVSS 7.5 High
Windows Server Update Service (WSUS) Tampering Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-20
- CVSS 7.1 High
Remote Desktop Spoofing Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-357
- CVSS 5.7 Medium
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.0 High
Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Race condition
- CVSS 7.8 High
Windows Management Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.0 High
Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H3
- Microsoft Windows 11 Version 23H2
- Memory corruption
- CVSS 7.4 High
Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 7.0 High
Windows Device Association Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 7.0 High
Windows Device Association Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.8 High
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- CVSS 8.8 High
Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 7.0 High
Windows Bluetooth RFCOM Protocol Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- Memory corruption
- CVSS 5.5 Medium
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 7.8 High
Windows HTTP.sys Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H3
- Microsoft Windows 11 Version 23H2
- Memory corruption
- CVSS 7.0 High
Windows Subsystem for Linux Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.0 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H3
- Microsoft Windows 11 Version 23H2
- Memory corruption
- CVSS 7.8 High
Windows HTTP.sys Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 7.5 High
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
- CVSS 7.3 High
Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 3.3 Low
Windows NTLM Spoofing Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Windows HTTP.sys Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 7.8 High
Cluster Client Failover (CCF) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CVSS 8.8 High
Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control
- CVSS 7.0 High
Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 7.0 High
Windows Subsystem for Linux Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.8 High
Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.3 High
Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-20
- CVSS 7.3 High
Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 HighCritical · KEVKEV
Desktop Window Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Host Process for Windows Tasks Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Path traversal
- CVSS 5.5 Medium
Windows File Explorer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 5.5 Medium
Windows File Explorer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 7.8 High
Windows Management Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Management Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Desktop Window Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.8 High
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 7.8 High
Windows Management Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Management Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 7.0 High
Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Memory corruption
- CVSS 5.5 Medium
Windows Management Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Information disclosure
- CVSS 7.8 High
Windows Management Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.5 High
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 7.5 High
Windows SMB Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 7.0 High
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Race condition
- Memory corruption
- CVSS 7.0 High
Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Race condition
- Memory corruption
- CVSS 7.5 High
Windows SMB Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 5.5 Medium
Windows File Explorer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 7.5 High
Windows SMB Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 7.8 High
Windows Management Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Management Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.5 High
Windows SMB Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition