Windows Server 2003
by Microsoft
Source repositories
CVEs (4,745)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-59202 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59201 | 0.00 | — | 0.00 | Oct 14, 2025 | Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59200 | 0.00 | — | 0.01 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally. | |||
| CVE-2025-59199 | 0.00 | — | 0.04 | Oct 14, 2025 | Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59196 | 0.00 | — | 0.00 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-59195 | 0.00 | — | 0.00 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally. | |||
| CVE-2025-59186 | 0.00 | — | 0.01 | Oct 14, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally. | |||
| CVE-2025-59185 | 0.00 | — | 0.01 | Oct 14, 2025 | External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network. | |||
| CVE-2025-58735 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | |||
| CVE-2025-58732 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. | |||
| CVE-2025-58722 | 0.00 | — | 0.02 | Oct 14, 2025 | Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-58719 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-58717 | 0.00 | — | 0.01 | Oct 14, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | |||
| CVE-2025-58716 | 0.00 | — | 0.00 | Oct 14, 2025 | Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-58715 | 0.00 | — | 0.00 | Oct 14, 2025 | Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-55701 | 0.00 | — | 0.00 | Oct 14, 2025 | Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-55700 | 0.00 | — | 0.01 | Oct 14, 2025 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | |||
| CVE-2025-55689 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-55687 | 0.00 | — | 0.00 | Oct 14, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally. | |||
| CVE-2025-55686 | 0.00 | — | 0.00 | Oct 14, 2025 | Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. |
- CVE-2025-59202Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2025-59201Oct 14, 2025risk 0.00cvss —epss 0.00
Improper access control in Network Connection Status Indicator (NCSI) allows an authorized attacker to elevate privileges locally.
- CVE-2025-59200Oct 14, 2025risk 0.00cvss —epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in Data Sharing Service Client allows an unauthorized attacker to perform spoofing locally.
- CVE-2025-59199Oct 14, 2025risk 0.00cvss —epss 0.04
Improper access control in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.
- CVE-2025-59196Oct 14, 2025risk 0.00cvss —epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
- CVE-2025-59195Oct 14, 2025risk 0.00cvss —epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Component allows an authorized attacker to deny service locally.
- CVE-2025-59186Oct 14, 2025risk 0.00cvss —epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2025-59185Oct 14, 2025risk 0.00cvss —epss 0.01
External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network.
- CVE-2025-58735Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- CVE-2025-58732Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally.
- CVE-2025-58722Oct 14, 2025risk 0.00cvss —epss 0.02
Heap-based buffer overflow in Windows DWM allows an authorized attacker to elevate privileges locally.
- CVE-2025-58719Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
- CVE-2025-58717Oct 14, 2025risk 0.00cvss —epss 0.01
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-58716Oct 14, 2025risk 0.00cvss —epss 0.00
Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
- CVE-2025-58715Oct 14, 2025risk 0.00cvss —epss 0.00
Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
- CVE-2025-55701Oct 14, 2025risk 0.00cvss —epss 0.00
Improper validation of specified type of input in Microsoft Windows allows an authorized attacker to elevate privileges locally.
- CVE-2025-55700Oct 14, 2025risk 0.00cvss —epss 0.01
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-55689Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
- CVE-2025-55687Oct 14, 2025risk 0.00cvss —epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Resilient File System (ReFS) allows an unauthorized attacker to elevate privileges locally.
- CVE-2025-55686Oct 14, 2025risk 0.00cvss —epss 0.00
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally.
Page 184 of 238