Known vulnerabilities in Microsoft Windows Server 2025
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-33055 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33053 | Exploited Microsoft Windows External Control of File Name or Path Vulnerability | 8.8 High | Jun 10, 2025 |
| CVE-2025-33052 | Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33050 | Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network | 7.5 High | Jun 10, 2025 |
| CVE-2025-32725 | Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network | 7.5 High | Jun 10, 2025 |
| CVE-2025-24065 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-24069 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-24068 | Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-47969 | Exposure of sensitive information to an unauthorized actor in Windows Hello allows an authorized attacker to disclose… | 4.4 Medium | Jun 10, 2025 |
| CVE-2025-33071 | Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network | 8.1 High | Jun 10, 2025 |
| CVE-2025-47955 | Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate… | 7.8 High | Jun 10, 2025 |
| CVE-2025-47160 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a… | 5.4 Medium | Jun 10, 2025 |
| CVE-2025-33067 | Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally | 8.4 High | Jun 10, 2025 |
| CVE-2025-33075 | Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to… | 7.8 High | Jun 10, 2025 |
| CVE-2025-33066 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… | 8.8 High | Jun 10, 2025 |
| CVE-2025-33064 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to… | 8.8 High | Jun 10, 2025 |
| CVE-2025-33065 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33063 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33062 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33061 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33060 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33059 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-33058 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-32722 | Improper access control in Windows Storage Port Driver allows an authorized attacker to disclose information locally | 5.5 Medium | Jun 10, 2025 |
| CVE-2025-32724 | Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized… | 7.5 High | Jun 10, 2025 |
Other Microsoft products
Windows Server 2019 5745
Windows Server 2019 (Server Core installation) 5648
Windows 10 Version 1809 5349
Windows Server 2022 5112
Windows Server 2016 5051
Windows Server 2016 (Server Core installation) 4847
Windows 10 Version 21H2 4539
Windows 10 Version 1607 4535
Windows Server 2012 R2 4103
Windows 10 Version 22H2 4041
Windows Server 2012 R2 (Server Core installation) 3958
Windows Server 2012 3865