# Microsoft Windows Server 2025.

Every CVE that names Microsoft Windows Server 2025 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [HTTP/2 Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-49788.md)
  `CVE-2026-49788` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [HTTP.sys Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-49787.md)
  `CVE-2026-49787` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Secure Boot Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-49783.md)
  `CVE-2026-49783` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-358
- [Windows Clipboard Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49183.md)
  `CVE-2026-49183` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-49184.md)
  `CVE-2026-49184` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows DHCP Client Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-49181.md)
  `CVE-2026-49181` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-49180.md)
  `CVE-2026-49180` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Path traversal
- [Windows Active Directory Domain Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-49178.md)
  `CVE-2026-49178` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [DHCP Server Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-48564.md)
  `CVE-2026-48564` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Push Notifications Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-44800.md)
  `CVE-2026-44800` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-40378.md)
  `CVE-2026-40378` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Windows Secure Channel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-44806.md)
  `CVE-2026-44806` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Windows Event Logging Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-34348.md)
  `CVE-2026-34348` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-693
- [Windows PowerShell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-40400.md)
  `CVE-2026-40400` · CVE record: Microsoft PowerShell 7.5 and 4 more · CVSS 8.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Path traversal
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-41087.md)
  `CVE-2026-41087` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-40422.md)
  `CVE-2026-40422` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Audio Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-34328.md)
  `CVE-2026-34328` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Windows File Explorer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-33842.md)
  `CVE-2026-33842` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Windows NTFS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-58640.md)
  `CVE-2026-58640` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.3 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Narrator Braille Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-58635.md)
  `CVE-2026-58635` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Command injection
- [Windows Kernel Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-58614.md)
  `CVE-2026-58614` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-58610.md)
  `CVE-2026-58610` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Graphics Component Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-58609.md)
  `CVE-2026-58609` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Print Spooler Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-58608.md)
  `CVE-2026-58608` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Windows Kernel-Mode Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-58602.md)
  `CVE-2026-58602` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability](https://agentprime.io/advisories/CVE-2026-58601.md)
  `CVE-2026-58601` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-58526.md)
  `CVE-2026-58526` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-57979.md)
  `CVE-2026-57979` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Domain Services Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-57976.md)
  `CVE-2026-57976` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft XML Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-57097.md)
  `CVE-2026-57097` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-426
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54127.md)
  `CVE-2026-54127` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-50694.md)
  `CVE-2026-50694` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Active Directory Federation Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-56155.md)
  `CVE-2026-56155` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-1220
- [Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-55144.md)
  `CVE-2026-55144` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-325
- [Windows GDI+ Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54122.md)
  `CVE-2026-54122` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54995.md)
  `CVE-2026-54995` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-55003.md)
  `CVE-2026-55003` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows TCP/IP Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54999.md)
  `CVE-2026-54999` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition
- [Windows SMB Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-54997.md)
  `CVE-2026-54997` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Active Directory Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-54119.md)
  `CVE-2026-54119` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Denial of service
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54996.md)
  `CVE-2026-54996` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, Race condition
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54114.md)
  `CVE-2026-54114` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54982.md)
  `CVE-2026-54982` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54109.md)
  `CVE-2026-54109` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54992.md)
  `CVE-2026-54992` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Print Configuration Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-55004.md)
  `CVE-2026-55004` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54112.md)
  `CVE-2026-54112` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition, Memory corruption
- [Active Directory Domain Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-55001.md)
  `CVE-2026-55001` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Weak cryptography or TLS
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54993.md)
  `CVE-2026-54993` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54986.md)
  `CVE-2026-54986` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54107.md)
  `CVE-2026-54107` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Race condition
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54991.md)
  `CVE-2026-54991` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, Race condition
- [Universal Print Management Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54111.md)
  `CVE-2026-54111` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption, Race condition
- [Windows USB Print Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-55000.md)
  `CVE-2026-55000` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-50697.md)
  `CVE-2026-50697` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Information disclosure
- [Remote Desktop Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-54990.md)
  `CVE-2026-54990` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-50696.md)
  `CVE-2026-50696` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Overlay Filter Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54987.md)
  `CVE-2026-54987` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54989.md)
  `CVE-2026-54989` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-54129.md)
  `CVE-2026-54129` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025.md?cursor=WyIyMDI2LTA3LTE0VDE3OjA0OjQxLjg2MjAwMFoiLCJDVkUtMjAyNi01NDEyOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025&cursor=WyIyMDI2LTA3LTE0VDE3OjA1OjUyLjYxMTAwMFoiLCJDVkUtMjAyNi00OTc4OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025/?cursor=WyIyMDI2LTA3LTE0VDE3OjA1OjUyLjYxMTAwMFoiLCJDVkUtMjAyNi00OTc4OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.