Microsoft Windows Server 2025 (Server Core installation) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2025 (Server Core installation): 2997 record(s), with affected versions and fixes.
CVE-2026-83652
High · 7.8
CWE-122 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83651
Medium · 6.5
CWE-125 Oct 13, 2026
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.
CVE-2026-83650
High · 7.8
CWE-122 Oct 13, 2026
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-83649
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
CVE-2026-83648
Medium · 6.5
CWE-476 Oct 13, 2026
Windows Active Directory Domain Services Denial of Service Vulnerability
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-83647
High · 7.5
CWE-125 Oct 13, 2026
Windows Active Directory Domain Services Denial of Service Vulnerability
Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.
CVE-2026-83646
Medium · 4.8
CWE-601 Oct 13, 2026
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.
CVE-2026-83645
High · 7.5
CWE-770 Oct 13, 2026
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83644
High · 7.0
CWE-416 Oct 13, 2026
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83643
High · 8.8
CWE-121 Oct 13, 2026
Windows Error Reporting Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
CVE-2026-83642
High · 8.8
CWE-843 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83641
High · 7.8
CWE-122 Oct 13, 2026
Windows Media Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
CVE-2026-83640
High · 7.8
CWE-122 Oct 13, 2026
Windows NTFS Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.
CVE-2026-83639
High · 7.8
CWE-122 Oct 13, 2026
Windows Sensor Data Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83638
High · 7.8
CWE-122 Oct 13, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83637
High · 7.8
CWE-125 Oct 13, 2026
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVE-2026-83636
Medium · 6.5
CWE-476 Oct 13, 2026
Windows Hyper-V Denial of Service Vulnerability
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
CVE-2026-83635
High · 7.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
CVE-2026-83634
High · 7.8
CWE-415 Oct 13, 2026
Windows BitLocker Elevation of Privilege Vulnerability
Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.
CVE-2026-83588
High · 7.8
CWE-122 Oct 13, 2026
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-83587
High · 7.8
CWE-822 Oct 13, 2026
Windows Core Messaging Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-83586
High · 7.8
CWE-1390 Oct 13, 2026
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83585
High · 7.8
CWE-134 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-83584
High · 7.0
CWE-416 Oct 13, 2026
Windows Smart Card Elevation of Privilege Vulnerability
Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.
CVE-2026-83583
High · 7.8
CWE-862 Oct 13, 2026
Windows Geotag Broker Elevation of Privilege Vulnerability
Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.