Windows Server 2025
by Microsoft
CVEs (1,879)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-50170 | Hig | 0.51 | 7.8 | 0.00 | Aug 12, 2025 | Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-50168 | Hig | 0.51 | 7.8 | 0.01 | Aug 12, 2025 | Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-50155 | Hig | 0.51 | 7.8 | 0.00 | Aug 12, 2025 | Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49761 | Hig | 0.51 | 7.8 | 0.00 | Aug 12, 2025 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49742 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally. | ||
| CVE-2025-49733 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49732 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49726 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49725 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Use after free in Windows Notification allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49721 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2025-49694 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49693 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49689 | Hig | 0.51 | 7.8 | 0.01 | Jul 8, 2025 | Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. | ||
| CVE-2025-49686 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49679 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49675 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49667 | Hig | 0.51 | 7.8 | 0.01 | Jul 8, 2025 | Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49665 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49661 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49660 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
- risk 0.51cvss 7.8epss 0.00
Improper handling of insufficient permissions or privileges in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Microsoft Graphics Component allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Null pointer dereference in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.01
Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Workspace Broker allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
Page 32 of 94