Microsoft Windows Server 2025 (Server Core installation) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2025 (Server Core installation): 2997 record(s), with affected versions and fixes.
CVE-2026-69958
Medium · 6.8
CWE-122 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69957
High · 7.8
CWE-126 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69955
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69954
Medium · 5.5
CWE-126 Oct 13, 2026
Windows Overlay Filter Information Disclosure Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.
CVE-2026-69953
High · 7.8
CWE-126 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69952
High · 7.8
CWE-125 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69950
High · 7.8
CWE-126 Oct 13, 2026
Windows Overlay Filter Elevation of Privilege Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69949
High · 7.8
CWE-122 Oct 13, 2026
Windows Client for NFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69947
Medium · 6.8
CWE-122 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-69945
High · 8.8
CWE-862 Oct 13, 2026
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.
CVE-2026-69942
High · 7.8
CWE-126 Oct 13, 2026
Windows Overlay Filter Remote Code Execution Vulnerability
Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.
CVE-2026-69940
Medium · 6.5
CWE-125 Oct 13, 2026
Windows Client for NFS Information Disclosure Vulnerability
Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-69935
High · 7.0
CWE-362 Oct 13, 2026
Windows Storage Elevation of Privilege Vulnerability
Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69934
High · 7.8
CWE-20 Oct 13, 2026
Windows Spaceport.sys Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69931
High · 7.0
CWE-362 Oct 13, 2026
Windows Storage Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-69926
High · 7.8
CWE-843 Oct 13, 2026
Desktop Window Manager Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-69923
High · 7.8
CWE-427 Oct 13, 2026
Windows AI Elevation of Privilege Vulnerability
Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
CVE-2026-69919
Medium · 5.5
CWE-125 Oct 13, 2026
Windows Cryptographic Services Information Disclosure Vulnerability
Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
CVE-2026-69918
High · 7.8
CWE-122 Oct 13, 2026
Windows Core Messaging Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-69916
High · 7.8
CWE-190 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69915
High · 7.0
CWE-416 Oct 13, 2026
Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69914
Medium · 5.5
CWE-125 Oct 13, 2026
Windows AppX Deployment Service Information Disclosure Vulnerability
Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.
CVE-2026-69913
High · 8.1
CWE-416 Oct 13, 2026
Windows TCP/IP Remote Code Execution Vulnerability
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-69909
High · 7.8
CWE-122 Oct 13, 2026
Microsoft COM for Windows Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.
CVE-2026-69905
Medium · 5.5
CWE-862 Oct 13, 2026
Windows AppX Deployment Service Tampering Vulnerability
Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.