Vulnerabilities of Microsoft Windows Server 2025 (Server Core installation)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-21325 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | 7.8 High | Jan 17, 2025 |
| CVE-2025-21245 | Windows Telephony Service Remote Code Execution Vulnerability | 8.8 High | Jan 14, 2025 |
| CVE-2025-21409 | Windows Telephony Service Remote Code Execution Vulnerability | 8.8 High | Jan 14, 2025 |
| CVE-2025-21223 | Windows Telephony Service Remote Code Execution Vulnerability | 8.8 High | Jan 14, 2025 |
| CVE-2025-21238 | Windows Telephony Service Remote Code Execution Vulnerability | 8.8 High | Jan 14, 2025 |
| CVE-2025-21240 | Windows Telephony Service Remote Code Execution Vulnerability | 8.8 High | Jan 14, 2025 |
| CVE-2025-21250 | Windows Telephony Service Remote Code Execution Vulnerability | 8.8 High | Jan 14, 2025 |
| CVE-2025-21246 | Windows Telephony Service Remote Code Execution Vulnerability | 8.8 High | Jan 14, 2025 |
| CVE-2025-21417 | Windows Telephony Service Remote Code Execution Vulnerability | 8.8 High | Jan 14, 2025 |
| CVE-2025-21334 | Exploited Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability | 7.8 High | Jan 14, 2025 |
| CVE-2025-21333 | Exploited Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability | 7.8 High | Jan 14, 2025 |
| CVE-2025-21311 | Windows NTLM V1 Elevation of Privilege Vulnerability | 9.8 Critical | Jan 14, 2025 |
| CVE-2025-21326 | Internet Explorer Remote Code Execution Vulnerability | 7.8 High | Jan 14, 2025 |
| CVE-2025-21332 | MapUrlToZone Security Feature Bypass Vulnerability | 4.3 Medium | Jan 14, 2025 |
| CVE-2025-21313 | Windows Security Account Manager (SAM) Denial of Service Vulnerability | 6.5 Medium | Jan 14, 2025 |
| CVE-2025-21218 | Windows Kerberos Denial of Service Vulnerability | 7.5 High | Jan 14, 2025 |
| CVE-2025-21378 | Windows CSC Service Elevation of Privilege Vulnerability | 7.8 High | Jan 14, 2025 |
| CVE-2025-21374 | Windows CSC Service Information Disclosure Vulnerability | 5.5 Medium | Jan 14, 2025 |
| CVE-2025-21372 | Microsoft Brokering File System Elevation of Privilege Vulnerability | 7.8 High | Jan 14, 2025 |
| CVE-2025-21340 | Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability | 5.5 Medium | Jan 14, 2025 |
| CVE-2025-21339 | Windows Telephony Service Remote Code Execution Vulnerability | 8.8 High | Jan 14, 2025 |
| CVE-2025-21336 | Windows Cryptographic Information Disclosure Vulnerability | 5.6 Medium | Jan 14, 2025 |
| CVE-2025-21338 | GDI+ Remote Code Execution Vulnerability | 7.8 High | Jan 14, 2025 |
| CVE-2025-21324 | Windows Digital Media Elevation of Privilege Vulnerability | 6.6 Medium | Jan 14, 2025 |
| CVE-2025-21317 | Windows Kernel Memory Information Disclosure Vulnerability | 5.5 Medium | Jan 14, 2025 |
Other Microsoft products
Windows Server 2019 5745
Windows Server 2019 (Server Core installation) 5648
Windows 10 Version 1809 5349
Windows Server 2022 5112
Windows Server 2016 5051
Windows Server 2016 (Server Core installation) 4847
Windows 10 Version 21H2 4539
Windows 10 Version 1607 4535
Windows Server 2012 R2 4103
Windows 10 Version 22H2 4041
Windows Server 2012 R2 (Server Core installation) 3958
Windows Server 2012 3865