# Microsoft Windows Server 2025.

Every CVE that names Microsoft Windows Server 2025 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows USB Mass Storage Class Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69490.md)
  `CVE-2026-69490` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69489.md)
  `CVE-2026-69489` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows VOLSNAP.SYS Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69426.md)
  `CVE-2026-69426` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft OpenSSH for Windows Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69397.md)
  `CVE-2026-69397` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69395.md)
  `CVE-2026-69395` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69392.md)
  `CVE-2026-69392` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69910.md)
  `CVE-2026-69910` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69352.md)
  `CVE-2026-69352` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-20
- [Windows Audio Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69311.md)
  `CVE-2026-69311` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69298.md)
  `CVE-2026-69298` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69323.md)
  `CVE-2026-69323` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69334.md)
  `CVE-2026-69334` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69291.md)
  `CVE-2026-69291` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69290.md)
  `CVE-2026-69290` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Print Spooler Components Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69309.md)
  `CVE-2026-69309` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Desktop Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69287.md)
  `CVE-2026-69287` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-68896.md)
  `CVE-2026-68896` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal
- [Windows Network Connection Broker Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72967.md)
  `CVE-2026-72967` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-72966.md)
  `CVE-2026-72966` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Windows Internet Connection Sharing (ICS) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-72964.md)
  `CVE-2026-72964` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Authentication bypass
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72961.md)
  `CVE-2026-72961` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Media Player Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72960.md)
  `CVE-2026-72960` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Deployment Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72954.md)
  `CVE-2026-72954` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72959.md)
  `CVE-2026-72959` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72950.md)
  `CVE-2026-72950` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Deployment Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72957.md)
  `CVE-2026-72957` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Spaceport.sys Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-72942.md)
  `CVE-2026-72942` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72941.md)
  `CVE-2026-72941` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows USB Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72953.md)
  `CVE-2026-72953` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Spaceport.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72952.md)
  `CVE-2026-72952` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Message Queuing Queue Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-72932.md)
  `CVE-2026-72932` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-126
- [Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72933.md)
  `CVE-2026-72933` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows SMB Client Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72936.md)
  `CVE-2026-72936` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-72931.md)
  `CVE-2026-72931` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-72928.md)
  `CVE-2026-72928` · CVE record: Microsoft Windows Server 2025 and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Winsock Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-72927.md)
  `CVE-2026-72927` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-71352.md)
  `CVE-2026-71352` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-71342.md)
  `CVE-2026-71342` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Spaceport.sys Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-71349.md)
  `CVE-2026-71349` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Core Messaging Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70583.md)
  `CVE-2026-70583` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70577.md)
  `CVE-2026-70577` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70581.md)
  `CVE-2026-70581` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-20
- [Windows Schannel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-70575.md)
  `CVE-2026-70575` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70572.md)
  `CVE-2026-70572` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Biometric Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70573.md)
  `CVE-2026-70573` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-20
- [Windows Spaceport.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70569.md)
  `CVE-2026-70569` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Defender Firewall Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70568.md)
  `CVE-2026-70568` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Display Enhancement Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70567.md)
  `CVE-2026-70567` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability](https://agentprime.io/advisories/CVE-2026-70574.md)
  `CVE-2026-70574` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70565.md)
  `CVE-2026-70565` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows ALPC Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69874.md)
  `CVE-2026-69874` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.2 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69858.md)
  `CVE-2026-69858` · CVE record: Microsoft Windows Server 2022 and 2 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69813.md)
  `CVE-2026-69813` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Text Shaping Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69786.md)
  `CVE-2026-69786` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69852.md)
  `CVE-2026-69852` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows HTTP Print Provider Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69769.md)
  `CVE-2026-69769` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows Shell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69829.md)
  `CVE-2026-69829` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69845.md)
  `CVE-2026-69845` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-20
- [Windows DHCP Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69876.md)
  `CVE-2026-69876` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.0 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Windows DHCP Client Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69781.md)
  `CVE-2026-69781` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025.md?cursor=WyIyMDI2LTA5LTA4VDE3OjE2OjQzLjcwMDAwMFoiLCJDVkUtMjAyNi02OTc4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025&cursor=WyIyMDI2LTA5LTA4VDE3OjE3OjI0Ljk1MTAwMFoiLCJDVkUtMjAyNi02OTUxMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025/?cursor=WyIyMDI2LTA5LTA4VDE3OjE3OjI0Ljk1MTAwMFoiLCJDVkUtMjAyNi02OTUxMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.