Skip to content

Known vulnerabilities in Microsoft Windows Server 2019

Is your version affected?

CVE Summary Score Published
CVE-2025-27486 Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized… 7.5 High Apr 8, 2025
CVE-2025-27487 Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network 8.0 High Apr 8, 2025
CVE-2025-27483 Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-27482 Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker… 8.1 High Apr 8, 2025
CVE-2025-27481 Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network 8.8 High Apr 8, 2025
CVE-2025-27484 Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an… 7.5 High Apr 8, 2025
CVE-2025-27480 Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network 8.1 High Apr 8, 2025
CVE-2025-27485 Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized… 7.5 High Apr 8, 2025
CVE-2025-27469 Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized… 7.5 High Apr 8, 2025
CVE-2025-27467 Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-26679 Use after free in RPC Endpoint Mapper Service allows an authorized attacker to elevate privileges locally 7.8 High Apr 8, 2025
CVE-2025-26678 Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a… 8.4 High Apr 8, 2025
CVE-2025-26676 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Apr 8, 2025
CVE-2025-26673 Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized… 7.5 High Apr 8, 2025
CVE-2025-26674 Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally 7.8 High Apr 8, 2025
CVE-2025-26672 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Apr 8, 2025
CVE-2025-26671 Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network 8.1 High Apr 8, 2025
CVE-2025-26652 Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized… 7.5 High Apr 8, 2025
CVE-2025-26670 Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code… 8.1 High Apr 8, 2025
CVE-2025-26647 Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network 8.8 High Apr 8, 2025
CVE-2025-26644 Automated recognition mechanism with inadequate detection or handling of adversarial input perturbations in Windows… 5.1 Medium Apr 8, 2025
CVE-2025-26648 Sensitive data storage in improperly locked memory in Windows Kernel allows an authorized attacker to elevate privileges… 7.8 High Apr 8, 2025
CVE-2025-26641 Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over… 7.5 High Apr 8, 2025
CVE-2025-26640 Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally 7.0 High Apr 8, 2025
CVE-2025-26635 Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network 6.5 Medium Apr 8, 2025

Other Microsoft products