Advisories · Technology
Microsoft Windows Server 2025 (Server Core installation).
Every CVE that names Microsoft Windows Server 2025 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.4 High
Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-940
- CVSS 7.0 High
Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Winlogon Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.0 High
Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- Race condition
- CVSS 7.0 High
Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- Memory corruption
- CVSS 7.8 High
Windows Wired AutoConfig Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.5 High
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Microsoft XML Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 8.8 High
Windows GDI+ Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 5.5 Medium
Windows Update Orchestrator Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Path traversal
- CVSS 7.0 High
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Memory corruption
- CVSS 7.8 High
Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Memory corruption
- CVSS 4.7 Medium
Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- Memory corruption
- CVSS 7.0 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 8.8 High
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.0 High
Windows Diagnostic Policy Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.0 High
Clipboard User Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 7.8 High
Windows StateRepository API Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 5.5 Medium
Windows StateRepository API Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- CWE-126
- CVSS 5.5 Medium
Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
RPC Runtime Library Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.0 High
RPC Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Direct Composition Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CVSS 8.8 High
Windows UI Immersive Server API Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 4.7 Medium
Windows Shell Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 5.5 Medium
HID Parser Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 8.8 High
Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Direct Composition Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Storage VSP Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Direct Composition Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Memory corruption
- CVSS 7.0 High
Windows Bind Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Memory corruption
- CVSS 7.0 High
Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Race condition
- CVSS 4.7 Medium
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CVSS 8.8 High
Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Windows Devices Human Interface Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 6.8 Medium
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 5.5 Medium
HID Parser Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 5.5 Medium
Windows Human Interface Device Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 5.5 Medium
HID Parser Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CVSS 7.8 High
Windows exFAT File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 8.8 High
Windows Event Tracing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Servicing Stack Updates Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.5 High
Windows GDI Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.8 High
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 7.5 High
Windows Event Logging Service Remote Code Execution Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Memory corruption
- CVSS 7.8 High
Microsoft Windows Search Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
- CVSS 8.4 High
Windows Internet (wininet.dll) Spoofing Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Authentication bypass
- CVSS 7.0 High
Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Race condition
- CVSS 7.8 High
Windows Error Reporting Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Authentication bypass
- CVSS 7.8 High
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-441
- CVSS 5.5 Medium
Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Information disclosure
- CWE-126