Windows Server 2003
by Microsoft
Source repositories
CVEs (4,746)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-49686 | 0.00 | — | 0.00 | Jul 8, 2025 | Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-49676 | 0.00 | — | 0.01 | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-49674 | 0.00 | — | 0.01 | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-49672 | 0.00 | — | 0.01 | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-49671 | 0.00 | — | 0.01 | Jul 8, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | |||
| CVE-2025-49670 | 0.00 | — | 0.01 | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-49661 | 0.00 | — | 0.00 | Jul 8, 2025 | Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-49658 | 0.00 | — | 0.00 | Jul 8, 2025 | Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally. | |||
| CVE-2025-49657 | 0.00 | — | 0.01 | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-48824 | 0.00 | — | 0.01 | Jul 8, 2025 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |||
| CVE-2025-47986 | 0.00 | — | 0.00 | Jul 8, 2025 | Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-47985 | 0.00 | — | 0.00 | Jul 8, 2025 | Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-47976 | 0.00 | — | 0.00 | Jul 8, 2025 | Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-47972 | 0.00 | — | 0.01 | Jul 8, 2025 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges over a network. | |||
| CVE-2025-47971 | 0.00 | — | 0.00 | Jul 8, 2025 | Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. | |||
| CVE-2025-47159 | 0.00 | — | 0.00 | Jul 8, 2025 | Protection mechanism failure in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | |||
| CVE-2025-33070 | 0.00 | — | 0.06 | Jun 10, 2025 | Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network. | |||
| CVE-2025-33056 | 0.00 | — | 0.01 | Jun 10, 2025 | Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over a network. | |||
| CVE-2025-33055 | 0.00 | — | 0.01 | Jun 10, 2025 | Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally. | |||
| CVE-2025-33052 | 0.00 | — | 0.01 | Jun 10, 2025 | Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
- CVE-2025-49686Jul 8, 2025risk 0.00cvss —epss 0.00
Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2025-49676Jul 8, 2025risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- CVE-2025-49674Jul 8, 2025risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- CVE-2025-49672Jul 8, 2025risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- CVE-2025-49671Jul 8, 2025risk 0.00cvss —epss 0.01
Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-49670Jul 8, 2025risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- CVE-2025-49661Jul 8, 2025risk 0.00cvss —epss 0.00
Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- CVE-2025-49658Jul 8, 2025risk 0.00cvss —epss 0.00
Out-of-bounds read in Windows TDX.sys allows an authorized attacker to disclose information locally.
- CVE-2025-49657Jul 8, 2025risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- CVE-2025-48824Jul 8, 2025risk 0.00cvss —epss 0.01
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
- CVE-2025-47986Jul 8, 2025risk 0.00cvss —epss 0.00
Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
- CVE-2025-47985Jul 8, 2025risk 0.00cvss —epss 0.00
Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
- CVE-2025-47976Jul 8, 2025risk 0.00cvss —epss 0.00
Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
- CVE-2025-47972Jul 8, 2025risk 0.00cvss —epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges over a network.
- CVE-2025-47971Jul 8, 2025risk 0.00cvss —epss 0.00
Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
- CVE-2025-47159Jul 8, 2025risk 0.00cvss —epss 0.00
Protection mechanism failure in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2025-33070Jun 10, 2025risk 0.00cvss —epss 0.06
Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network.
- CVE-2025-33056Jun 10, 2025risk 0.00cvss —epss 0.01
Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an unauthorized attacker to deny service over a network.
- CVE-2025-33055Jun 10, 2025risk 0.00cvss —epss 0.01
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
- CVE-2025-33052Jun 10, 2025risk 0.00cvss —epss 0.01
Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally.
Page 191 of 238