# Microsoft Windows Server 2025.

Every CVE that names Microsoft Windows Server 2025 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Key Storage Provider Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-88140.md)
  `CVE-2026-88140` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [WebDAV Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-88137.md)
  `CVE-2026-88137` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88136.md)
  `CVE-2026-88136` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-41
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88107.md)
  `CVE-2026-88107` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption
- [Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88106.md)
  `CVE-2026-88106` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Failover Cluster Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88102.md)
  `CVE-2026-88102` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88100.md)
  `CVE-2026-88100` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Failover Cluster Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-88099.md)
  `CVE-2026-88099` · CVE record: Microsoft Windows Server 2019 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-248
- [Windows Security Support Provider Interface Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88098.md)
  `CVE-2026-88098` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Graphics Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88073.md)
  `CVE-2026-88073` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88071.md)
  `CVE-2026-88071` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows BitLocker Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88070.md)
  `CVE-2026-88070` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-87716.md)
  `CVE-2026-87716` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [WebDAV Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-87714.md)
  `CVE-2026-87714` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Windows Bluetooth Port Driver Remote Code Execution](https://agentprime.io/advisories/CVE-2026-87713.md)
  `CVE-2026-87713` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87712.md)
  `CVE-2026-87712` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87710.md)
  `CVE-2026-87710` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition
- [Windows Fax and Scan Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87707.md)
  `CVE-2026-87707` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87706.md)
  `CVE-2026-87706` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Management Services Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87691.md)
  `CVE-2026-87691` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85945.md)
  `CVE-2026-85945` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-85939.md)
  `CVE-2026-85939` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Shell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85936.md)
  `CVE-2026-85936` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows USB Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85935.md)
  `CVE-2026-85935` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-126
- [Windows AppX Deployment Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85934.md)
  `CVE-2026-85934` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Print Spooler Components Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85933.md)
  `CVE-2026-85933` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Distributed File System (DFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85931.md)
  `CVE-2026-85931` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Image Acquisition Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85930.md)
  `CVE-2026-85930` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Volume Manager Extension Driver Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85928.md)
  `CVE-2026-85928` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85926.md)
  `CVE-2026-85926` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Azure Active Directory Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85916.md)
  `CVE-2026-85916` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [Windows Embedded Mode Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85914.md)
  `CVE-2026-85914` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85904.md)
  `CVE-2026-85904` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption
- [Windows Remote Access Connection Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85867.md)
  `CVE-2026-85867` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Account Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85329.md)
  `CVE-2026-85329` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption
- [Windows CD-ROM Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83888.md)
  `CVE-2026-83888` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-126
- [Windows Device Association Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83710.md)
  `CVE-2026-83710` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Active Directory Federation Services (AD FS) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-83674.md)
  `CVE-2026-83674` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70303.md)
  `CVE-2026-70303` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Fast FAT File System Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70277.md)
  `CVE-2026-70277` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70270.md)
  `CVE-2026-70270` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [WebDAV Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70262.md)
  `CVE-2026-70262` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows DNS Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70244.md)
  `CVE-2026-70244` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70238.md)
  `CVE-2026-70238` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Mobile Device Management Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-70216.md)
  `CVE-2026-70216` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-1220
- [Windows OLE DB Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70210.md)
  `CVE-2026-70210` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Remote Desktop Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70187.md)
  `CVE-2026-70187` · CVE record: Microsoft Windows Server 2012 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft PowerShell Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-70185.md)
  `CVE-2026-70185` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Windows NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70172.md)
  `CVE-2026-70172` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-70170.md)
  `CVE-2026-70170` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Domain Name Service Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70167.md)
  `CVE-2026-70167` · CVE record: Microsoft Windows Server 2022 and 2 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows TCP/IP Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70164.md)
  `CVE-2026-70164` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft PowerShell Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70052.md)
  `CVE-2026-70052` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70048.md)
  `CVE-2026-70048` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows CD-ROM Driver Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70041.md)
  `CVE-2026-70041` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-126
- [Windows Spaceport.sys Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69934.md)
  `CVE-2026-69934` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption, CWE-20
- [Windows NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69916.md)
  `CVE-2026-69916` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Active Directory Domain Services Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88165.md)
  `CVE-2026-88165` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-88173.md)
  `CVE-2026-88173` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Race condition, Memory corruption
- [Windows Encrypting File System (EFS) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-88162.md)
  `CVE-2026-88162` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025.md?cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjEyLjI1MzAwMFoiLCJDVkUtMjAyNi04ODE2MiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-2025&cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjIyLjI4MzAwMFoiLCJDVkUtMjAyNi04ODE0MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-2025/?cursor=WyIyMDI2LTEwLTEzVDE5OjAwOjIyLjI4MzAwMFoiLCJDVkUtMjAyNi04ODE0MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.