Skip to content

Known vulnerabilities in Microsoft Windows Server 2025 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-83685 Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network 6.5 Medium Oct 13, 2026
CVE-2026-83703 Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network 6.5 Medium Oct 13, 2026
CVE-2026-83686 Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83695 Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information… 5.5 Medium Oct 13, 2026
CVE-2026-83696 Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83714 Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83665 Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network 7.5 High Oct 13, 2026
CVE-2026-83676 Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83677 Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny… 7.5 High Oct 13, 2026
CVE-2026-83679 Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83668 Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally 5.5 Medium Oct 13, 2026
CVE-2026-83680 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83670 Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information… 7.5 High Oct 13, 2026
CVE-2026-83682 Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.0 High Oct 13, 2026
CVE-2026-83683 Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information… 6.5 Medium Oct 13, 2026
CVE-2026-83672 Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized… 4.7 Medium Oct 13, 2026
CVE-2026-83640 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally 7.8 High Oct 13, 2026
CVE-2026-83634 Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83651 Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network 6.5 Medium Oct 13, 2026
CVE-2026-83643 Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network 8.8 High Oct 13, 2026
CVE-2026-83636 Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally 6.5 Medium Oct 13, 2026
CVE-2026-83637 Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83645 Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an… 7.5 High Oct 13, 2026
CVE-2026-83638 Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally 7.8 High Oct 13, 2026
CVE-2026-83656 Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker… 4.7 Medium Oct 13, 2026

Other Microsoft products