Microsoft Windows Server 2025 (Server Core installation) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2025 (Server Core installation): 2997 record(s), with affected versions and fixes.
CVE-2026-88123
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88122
Medium · 6.5
CWE-125 Oct 13, 2026
Role: DNS Server Denial of Service Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.
CVE-2026-88121
High · 8.0
CWE-416 Oct 13, 2026
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.
CVE-2026-88120
High · 8.1
CWE-416 Oct 13, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88119
High · 8.1
CWE-416 Oct 13, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88118
High · 7.8
CWE-122 Oct 13, 2026
Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
CVE-2026-88117
High · 8.1
CWE-416 Oct 13, 2026
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88116
High · 8.8
CWE-822 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88115
High · 8.8
CWE-125 Oct 13, 2026
Windows Server for NFS Remote Code Execution Vulnerability
Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.
CVE-2026-88114
High · 8.8
CWE-822 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88112
High · 8.8
CWE-822 Oct 13, 2026
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88110
High · 7.0
CWE-122 Oct 13, 2026
Windows Graphics Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88107
High · 7.0
CWE-362 Oct 13, 2026
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88106
High · 7.0
CWE-416 Oct 13, 2026
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-88102
Critical · 9.8
CWE-416 Oct 13, 2026
Microsoft Failover Cluster Remote Code Execution Vulnerability
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
CVE-2026-88101
High · 7.8
CWE-1390 Oct 13, 2026
Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability
Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.
CVE-2026-88100
High · 7.8
CWE-416 Oct 13, 2026
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
CVE-2026-88099
Medium · 5.9
CWE-248 Oct 13, 2026
Windows Failover Cluster Denial of Service Vulnerability
Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.
CVE-2026-88098
High · 7.0
CWE-822 Oct 13, 2026
Windows Security Support Provider Interface Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
CVE-2026-88096
High · 7.0
CWE-362 Oct 13, 2026
Windows DCOM Server Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
CVE-2026-88093
High · 7.8
CWE-122 Oct 13, 2026
Desktop Window Manager Elevation of Privilege Vulnerability
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-88091
High · 7.8
CWE-502 Oct 13, 2026
Windows Management Instrumentation Elevation of Privilege Vulnerability
Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
CVE-2026-88080
High · 7.8
CWE-416 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-88076
High · 7.0
CWE-476 Oct 13, 2026
Windows Installer Elevation of Privilege Vulnerability
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-88073
High · 7.8
CWE-416 Oct 13, 2026
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.