Windows Server 2025
by Microsoft
CVEs (1,879)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-21336 | Med | 0.36 | 5.6 | 0.01 | Jan 14, 2025 | Windows Cryptographic Information Disclosure Vulnerability | ||
| CVE-2025-21323 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21321 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21320 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21319 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21318 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21317 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21316 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Kernel Memory Information Disclosure Vulnerability | ||
| CVE-2025-21284 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Virtual Trusted Platform Module Denial of Service Vulnerability | ||
| CVE-2025-21280 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Virtual Trusted Platform Module Denial of Service Vulnerability | ||
| CVE-2025-21274 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows Event Tracing Denial of Service Vulnerability | ||
| CVE-2025-21257 | Med | 0.36 | 5.5 | 0.01 | Jan 14, 2025 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability | ||
| CVE-2026-45595 | Med | 0.35 | 5.4 | 0.00 | Jun 9, 2026 | Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2026-35423 | Med | 0.35 | 5.4 | 0.01 | May 12, 2026 | Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-25185 | Med | 0.35 | 5.3 | 0.01 | Mar 10, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2026-20927 | Med | 0.35 | 5.3 | 0.01 | Jan 13, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network. | ||
| CVE-2025-62567 | Med | 0.35 | 5.3 | 0.01 | Dec 9, 2025 | Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network. | ||
| CVE-2025-47160 | Med | 0.35 | 5.4 | 0.01 | Jun 10, 2025 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. | ||
| CVE-2025-29956 | Med | 0.35 | 5.4 | 0.01 | May 13, 2025 | Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-65777 | Med | 0.34 | 5.3 | 0.00 | Aug 11, 2026 | Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network. |
- risk 0.36cvss 5.6epss 0.01
Windows Cryptographic Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Kernel Memory Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Event Tracing Denial of Service Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- risk 0.35cvss 5.4epss 0.00
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.35cvss 5.4epss 0.01
Out-of-bounds read in Telnet Client allows an unauthorized attacker to disclose information over a network.
- risk 0.35cvss 5.3epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.
- risk 0.35cvss 5.3epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB Server allows an authorized attacker to deny service over a network.
- risk 0.35cvss 5.3epss 0.01
Integer underflow (wrap or wraparound) in Windows Hyper-V allows an authorized attacker to deny service over a network.
- risk 0.35cvss 5.4epss 0.01
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
- risk 0.35cvss 5.4epss 0.01
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
- risk 0.34cvss 5.3epss 0.00
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
Page 72 of 94