Windows Server 2025
by Microsoft
CVEs (1,879)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-59195 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally. | ||
| CVE-2025-59194 | Hig | 0.46 | 7.0 | 0.03 | Oct 14, 2025 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-59193 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-58738 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-58737 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-58736 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-58735 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-58734 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-58733 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-58732 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-58731 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-58730 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | ||
| CVE-2025-58727 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-58725 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-55691 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-55690 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-55689 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-55688 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-55686 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-55685 | Hig | 0.46 | 7.0 | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.
- risk 0.46cvss 7.0epss 0.03
Use of uninitialized resource in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
Page 51 of 94