Advisories · Technology

Microsoft Windows Server 2025 (Server Core installation).

Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-40404 CVE record

CVSS 7.8 High

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 9 Jun 2026
CVE-2026-40409 CVE record

CVSS 7.8 High

Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-197
Not analysed yet 9 Jun 2026
CVE-2026-41108 CVE record

CVSS 7.0 High

Windows DNS Client Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 9 Jun 2026
CVE-2026-45585 CVE record

CVSS 6.8 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Command injection
Not analysed yet 19 May 2026
CVE-2026-41097 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-1329
Not analysed yet 12 May 2026
CVE-2026-40413 CVE record

CVSS 7.4 High

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40403 CVE record

CVSS 8.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40401 CVE record

CVSS 7.1 High

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40398 CVE record

CVSS 7.8 High

Windows Remote Desktop Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-32209 CVE record

CVSS 4.4 Medium

Windows Filtering Platform (WFP) Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control
Not analysed yet 12 May 2026
CVE-2026-40397 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40382 CVE record

CVSS 7.8 High

Windows Telephony Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40369 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34341 CVE record

CVSS 7.0 High

Windows Link-Layer Discovery Protocol (LLDP) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34340 CVE record

CVSS 7.0 High

Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34339 CVE record

CVSS 5.5 Medium

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34338 CVE record

CVSS 7.8 High

Windows Telephony Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34337 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34336 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34334 CVE record

CVSS 7.8 High

Windows TCP/IP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
Not analysed yet 12 May 2026
CVE-2026-34332 CVE record

CVSS 8.0 High

Windows Kernel-Mode Driver Remote Code Execution Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-33838 CVE record

CVSS 7.8 High

Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-33837 CVE record

CVSS 7.8 High

Windows TCP/IP Local Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-33835 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-42896 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-42825 CVE record

CVSS 7.0 High

Windows Telephony Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-32170 CVE record

CVSS 6.7 Medium

Windows Rich Text Edit Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-32161 CVE record

CVSS 7.5 High

Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-41096 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows DNS Client Remote Code Execution Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-41095 CVE record

CVSS 7.8 High

Data Deduplication Elevation of Privilege Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-41089 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Netlogon Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-41088 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Path traversal
Not analysed yet 12 May 2026
CVE-2026-40415 CVE record

CVSS 8.1 High

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40414 CVE record

CVSS 7.4 High

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40410 CVE record

CVSS 7.0 High

Windows SMB Client Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40408 CVE record

CVSS 7.8 High

Windows WAN ARP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40407 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40406 CVE record

CVSS 7.5 High

Windows TCP/IP Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40405 CVE record

CVSS 7.5 High

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40399 CVE record

CVSS 7.8 High

Windows TCP/IP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-40380 CVE record

CVSS 6.2 Medium

Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-197
Not analysed yet 12 May 2026
CVE-2026-40377 CVE record

CVSS 7.8 High

Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-35424 CVE record

CVSS 7.5 High

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 12 May 2026
CVE-2026-35423 CVE record

CVSS 5.4 Medium

Windows 11 Telnet Client Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-35422 CVE record

CVSS 6.5 Medium

Windows TCP/IP Driver Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Authentication bypass
Not analysed yet 12 May 2026
CVE-2026-35421 CVE record

CVSS 7.8 High

Windows GDI Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-35420 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-35419 CVE record

CVSS 5.5 Medium

Windows DWM Core Library Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-35418 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-35417 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-35416 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-35415 CVE record

CVSS 7.8 High

Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34351 CVE record

CVSS 7.8 High

Windows TCP/IP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
Not analysed yet 12 May 2026
CVE-2026-34350 CVE record

CVSS 6.5 Medium

Windows Storport Miniport Driver Denial of Service Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34347 CVE record

CVSS 7.0 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34345 CVE record

CVSS 7.0 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34344 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34343 CVE record

CVSS 7.8 High

Windows Application Identity (AppID) Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026
CVE-2026-34342 CVE record

CVSS 7.0 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
Not analysed yet 12 May 2026
CVE-2026-34333 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 12 May 2026