Advisories · Technology
Microsoft Windows Server 2025 (Server Core installation).
Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Windows Domain Controller Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 7.8 High
Windows Network Connections Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 8.2 High
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- Information disclosure
- CVSS 7.8 High
Windows Network Connections Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 5.5 Medium
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
- CVSS 7.8 High
Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Race condition
- Memory corruption
- CVSS 5.3 Medium
Windows Media Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Information disclosure
- CVSS 5.5 Medium
Windows Media Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 8.8 High
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Authentication bypass
- CVSS 8.8 High
Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 6.2 Medium
HTTP.sys Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-20
- CVSS 6.1 Medium
Windows USB Audio Class Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 5.5 Medium
Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 7.8 High
Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 5.3 Medium
Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 5.5 Medium
Windows File Explorer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 5.5 Medium
Windows File Explorer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 5.5 Medium
Windows File Explorer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 5.5 Medium
Windows File Explorer Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 7.8 High
Windows Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 8.1 High
Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.1 High
Windows DNS Client Tampering Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Broken access control
- CVSS 7.8 High
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 5.5 Medium
Windows Overlay Filter Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 7.8 High
Windows Overlay Filter Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CWE-126
- CVSS 7.8 High
NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
- CWE-681
- CVSS 7.8 High
Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 5.5 Medium
Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.1 High
Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Authentication bypass
- CVSS 6.1 Medium
Windows Print Spooler Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-126
- CVSS 7.8 High
Windows Sensor Data Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-118
- CVSS 6.3 Medium
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Content Delivery Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- Memory corruption
- CVSS 8.8 High
Windows Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 8.8 High
Windows Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Race condition
- Memory corruption
- CVSS 6.8 Medium
Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 8.0 High
Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Authentication bypass
- CVSS 7.8 High
Windows User Interface Core Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Path traversal
- CVSS 7.8 High
Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- CVSS 8.8 High
Windows Remote Desktop Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 5.5 Medium
Windows DWM Core Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 8.8 High
DirectX Graphics Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 5.5 Medium
Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 7.8 High
Windows OLE Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control
- CVSS 6.5 Medium
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-126
- CVSS 5.5 Medium
Windows Push Notification Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 7.8 High
Windows NTFS Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Filtering Platform Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-1220
- CVSS 7.0 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 6.5 Medium
Windows Remote Desktop Client Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Netlogon RPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Broken access control