Aller au contenu

Vulnérabilités connues pour Microsoft Windows Server 2025 (Server Core installation)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2025-47998 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 Élevée 8 juil. 2025
CVE-2025-47996 Integer underflow (wrap or wraparound) in Windows MBT Transport driver allows an authorized attacker to elevate… 7.8 Élevée 8 juil. 2025
CVE-2025-47982 Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-47981 Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a… 9.8 Critique 8 juil. 2025
CVE-2025-47980 Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized… 6.2 Moyenne 8 juil. 2025
CVE-2025-47978 Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network 6.5 Moyenne 8 juil. 2025
CVE-2025-47975 Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally 7.0 Élevée 8 juil. 2025
CVE-2025-49760 External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a… 3.5 Faible 8 juil. 2025
CVE-2025-47973 Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-49753 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 Élevée 8 juil. 2025
CVE-2025-49735 Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network 8.1 Élevée 8 juil. 2025
CVE-2025-49726 Use after free in Windows Notification allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-49723 Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally 8.8 Élevée 8 juil. 2025
CVE-2025-49721 Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-47993 Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-49694 Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-47991 Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-49691 Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over an adjacent network 8.0 Élevée 8 juil. 2025
CVE-2025-49690 Concurrent execution using shared resource with improper synchronization ('race condition') in Capability Access… 7.4 Élevée 8 juil. 2025
CVE-2025-49689 Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-49688 Double free in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a… 8.8 Élevée 8 juil. 2025
CVE-2025-49687 Out-of-bounds read in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally 8.8 Élevée 8 juil. 2025
CVE-2025-49686 Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally 7.8 Élevée 8 juil. 2025
CVE-2025-49676 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 Élevée 8 juil. 2025
CVE-2025-49674 Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to… 8.8 Élevée 8 juil. 2025

Autres produits Microsoft