Advisories · Technology

Microsoft Windows Server 2025.

Every CVE that names Microsoft Windows Server 2025 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-21183 CVE record

CVSS 7.4 High

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21182 CVE record

CVSS 7.4 High

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21379 CVE record

CVSS 7.1 High

DHCP Client Service Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 11 Feb 2025
CVE-2025-21351 CVE record

CVSS 7.5 High

Windows Active Directory Domain Services API Denial of Service Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Denial of service
Not analysed yet 11 Feb 2025
CVE-2025-21325 CVE record

CVSS 7.8 High

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Broken access control
Not analysed yet 17 Jan 2025
CVE-2025-21334 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21333 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21311 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows NTLM V1 Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Authentication bypass
Not analysed yet 14 Jan 2025
CVE-2025-21326 CVE record

CVSS 7.8 High

Internet Explorer Remote Code Execution Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21313 CVE record

CVSS 6.5 Medium

Windows Security Account Manager (SAM) Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21218 CVE record

CVSS 7.5 High

Windows Kerberos Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21378 CVE record

CVSS 7.8 High

Windows CSC Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21374 CVE record

CVSS 5.5 Medium

Windows CSC Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21372 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21340 CVE record

CVSS 5.5 Medium

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21323 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21317 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21308 CVE record

CVSS 6.5 Medium

Windows Themes Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21292 CVE record

CVSS 8.8 High

Windows Search Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Code injection
Not analysed yet 14 Jan 2025
CVE-2025-21275 CVE record

CVSS 7.8 High

Windows App Package Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21274 CVE record

CVSS 5.5 Medium

Windows Event Tracing Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 14 Jan 2025
CVE-2025-21229 CVE record

CVSS 6.6 Medium

Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21225 CVE record

CVSS 5.9 Medium

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21224 CVE record

CVSS 8.1 High

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CWE-591
Not analysed yet 14 Jan 2025
CVE-2025-21213 CVE record

CVSS 4.6 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21211 CVE record

CVSS 6.8 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 14 Jan 2025
CVE-2025-21202 CVE record

CVSS 6.1 Medium

Windows Recovery Environment Agent Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21207 CVE record

CVSS 7.5 High

Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21193 CVE record

CVSS 6.5 Medium

Active Directory Federation Server Spoofing Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Cross-site request forgery (CSRF)
Not analysed yet 14 Jan 2025
CVE-2025-21335 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21330 CVE record

CVSS 7.5 High

Windows Remote Desktop Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21278 CVE record

CVSS 6.2 Medium

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 14 Jan 2025
CVE-2025-21219 CVE record

CVSS 4.3 Medium

MapUrlToZone Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-41
Not analysed yet 14 Jan 2025
CVE-2025-21382 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21321 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21318 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21316 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21315 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21314 CVE record

CVSS 6.5 Medium

Windows SmartScreen Spoofing Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-451
Not analysed yet 14 Jan 2025
CVE-2025-21309 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 14 Jan 2025
CVE-2025-21301 CVE record

CVSS 6.5 Medium

Windows Geolocation Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21299 CVE record

CVSS 7.1 High

Windows Kerberos Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21297 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21293 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21284 CVE record

CVSS 5.5 Medium

Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2025-21281 CVE record

CVSS 7.8 High

Microsoft COM for Windows Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21280 CVE record

CVSS 5.5 Medium

Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2025-21257 CVE record

CVSS 5.5 Medium

Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21248 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21241 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21239 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21235 CVE record

CVSS 7.8 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2025-21234 CVE record

CVSS 7.8 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2024-49128 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49116 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49114 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-820
Not analysed yet 10 Dec 2024
CVE-2024-49110 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49109 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49095 CVE record

CVSS 7.0 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49083 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024