Skip to content

Known vulnerabilities in Microsoft Windows Server 2025 (Server Core installation)

Is your version affected?

CVE Summary Score Published
CVE-2026-62696 Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized… 7.8 High Aug 11, 2026
CVE-2026-62690 Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push… 7.0 High Aug 11, 2026
CVE-2026-62695 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61936 Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature… 5.5 Medium Aug 11, 2026
CVE-2026-61939 Use after free in Winlogon allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-61933 Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-61934 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-62692 Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges… 7.8 High Aug 11, 2026
CVE-2026-61937 Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61928 Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally 5.5 Medium Aug 11, 2026
CVE-2026-61930 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61925 Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61927 Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-61924 Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network 6.5 Medium Aug 11, 2026
CVE-2026-61368 Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally 5.0 Medium Aug 11, 2026
CVE-2026-61366 Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally 7.0 High Aug 11, 2026
CVE-2026-61367 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate… 7.8 High Aug 11, 2026
CVE-2026-61923 Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges… 7.8 High Aug 11, 2026
CVE-2026-61356 Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate… 7.8 High Aug 11, 2026
CVE-2026-61350 Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack 4.6 Medium Aug 11, 2026
CVE-2026-61348 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges… 7.0 High Aug 11, 2026
CVE-2026-61361 Use after free in Windows DHCP Client allows an authorized attacker to execute code locally 7.0 High Aug 11, 2026
CVE-2026-61347 Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally 5.5 Medium Aug 11, 2026
CVE-2026-61353 Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally 7.8 High Aug 11, 2026
CVE-2026-61345 Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a… 6.5 Medium Aug 11, 2026

Other Microsoft products