# Microsoft Windows Server 2025.

Every CVE that names Microsoft Windows Server 2025 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Schannel Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-85818.md)
  `CVE-2026-85818` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS
- [Microsoft PowerShell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85817.md)
  `CVE-2026-85817` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-807
- [Windows Wi-Fi Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85816.md)
  `CVE-2026-85816` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Device Association Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85815.md)
  `CVE-2026-85815` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Windows Media Foundation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85814.md)
  `CVE-2026-85814` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Bind Filter Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85812.md)
  `CVE-2026-85812` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [Network Policy Server (NPS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85811.md)
  `CVE-2026-85811` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Telephony Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85810.md)
  `CVE-2026-85810` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-85808.md)
  `CVE-2026-85808` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85809.md)
  `CVE-2026-85809` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows USB Video Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85807.md)
  `CVE-2026-85807` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Network Policy Server (NPS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85806.md)
  `CVE-2026-85806` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft PowerShell Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-85805.md)
  `CVE-2026-85805` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-358
- [Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85804.md)
  `CVE-2026-85804` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85803.md)
  `CVE-2026-85803` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85802.md)
  `CVE-2026-85802` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Error Reporting Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85800.md)
  `CVE-2026-85800` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Network Policy Server (NPS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85799.md)
  `CVE-2026-85799` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Distributed File System (DFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85798.md)
  `CVE-2026-85798` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.2 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows GDI Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85797.md)
  `CVE-2026-85797` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-20
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85796.md)
  `CVE-2026-85796` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-197
- [Windows Text Services Framework Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85795.md)
  `CVE-2026-85795` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85794.md)
  `CVE-2026-85794` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85792.md)
  `CVE-2026-85792` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85791.md)
  `CVE-2026-85791` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows CD-ROM Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85377.md)
  `CVE-2026-85377` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Print Spooler Components Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85376.md)
  `CVE-2026-85376` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85375.md)
  `CVE-2026-85375` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Installer Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85374.md)
  `CVE-2026-85374` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85373.md)
  `CVE-2026-85373` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Network Policy Server (NPS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85371.md)
  `CVE-2026-85371` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85372.md)
  `CVE-2026-85372` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85369.md)
  `CVE-2026-85369` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 8.2 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [WebDAV Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85370.md)
  `CVE-2026-85370` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85367.md)
  `CVE-2026-85367` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85368.md)
  `CVE-2026-85368` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85366.md)
  `CVE-2026-85366` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Servicing Stack Updates Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85365.md)
  `CVE-2026-85365` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85364.md)
  `CVE-2026-85364` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Management Instrumentation Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85362.md)
  `CVE-2026-85362` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85361.md)
  `CVE-2026-85361` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Performance Monitor Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85359.md)
  `CVE-2026-85359` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85358.md)
  `CVE-2026-85358` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85356.md)
  `CVE-2026-85356` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85355.md)
  `CVE-2026-85355` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-829
- [Windows Error Reporting Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85354.md)
  `CVE-2026-85354` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85352.md)
  `CVE-2026-85352` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows USB Video Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85341.md)
  `CVE-2026-85341` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85339.md)
  `CVE-2026-85339` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85343.md)
  `CVE-2026-85343` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Remote Desktop Client Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85337.md)
  `CVE-2026-85337` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85338.md)
  `CVE-2026-85338` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Print Spooler Components Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85353.md)
  `CVE-2026-85353` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85342.md)
  `CVE-2026-85342` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Message Queuing Queue Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85334.md)
  `CVE-2026-85334` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Performance Monitor Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85333.md)
  `CVE-2026-85333` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85332.md)
  `CVE-2026-85332` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Device Association Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85336.md)
  `CVE-2026-85336` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85328.md)
  `CVE-2026-85328` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Device Association Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85331.md)
  `CVE-2026-85331` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025.md?cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjAxLjg1MTAwMFoiLCJDVkUtMjAyNi04NTMzMSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025&cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjA3LjAxMjAwMFoiLCJDVkUtMjAyNi04NTgyMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025/?cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjA3LjAxMjAwMFoiLCJDVkUtMjAyNi04NTgyMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.