Skip to content

Known vulnerabilities in Microsoft Windows Server 2025 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2025-26665 Sensitive data storage in improperly locked memory in Windows upnphost.dll allows an authorized attacker to elevate… 7.0 High Apr 8, 2025
CVE-2025-26664 Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose… 6.5 Medium Apr 8, 2025
CVE-2025-26663 Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code… 8.1 High Apr 8, 2025
CVE-2025-26645 Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network 8.8 High Mar 11, 2025
CVE-2025-26633 Exploited Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability 7.0 High Mar 11, 2025
CVE-2025-24993 Exploited Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability 7.8 High Mar 11, 2025
CVE-2025-24992 Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally 5.5 Medium Mar 11, 2025
CVE-2025-24991 Exploited Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability 5.5 Medium Mar 11, 2025
CVE-2025-24985 Exploited Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability 7.8 High Mar 11, 2025
CVE-2025-24984 Exploited Microsoft Windows NTFS Information Disclosure Vulnerability 4.6 Medium Mar 11, 2025
CVE-2025-24084 Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally 8.4 High Mar 11, 2025
CVE-2025-24076 Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally 7.3 High Mar 11, 2025
CVE-2025-24072 Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges… 7.8 High Mar 11, 2025
CVE-2025-24071 Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to… 6.5 Medium Mar 11, 2025
CVE-2025-24067 Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally 7.8 High Mar 11, 2025
CVE-2025-24066 Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally 7.8 High Mar 11, 2025
CVE-2025-24061 Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security… 7.8 High Mar 11, 2025
CVE-2025-24064 Use after free in DNS Server allows an unauthorized attacker to execute code over a network 8.1 High Mar 11, 2025
CVE-2025-24059 Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to… 7.8 High Mar 11, 2025
CVE-2025-24056 Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network 8.8 High Mar 11, 2025
CVE-2025-24055 Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical… 4.3 Medium Mar 11, 2025
CVE-2025-24051 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 High Mar 11, 2025
CVE-2025-24054 Exploited Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability 6.5 Medium Mar 11, 2025
CVE-2025-24050 Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally 7.8 High Mar 11, 2025
CVE-2025-24048 Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally 7.8 High Mar 11, 2025

Other Microsoft products