Microsoft Windows Server 2025 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Windows Server 2025: 3001 record(s), with affected versions and fixes.cpe:2.3:o:microsoft:windows_server_2025
CVE-2025-54105
High · 7.0
CWE-362 Sep 9, 2025
Microsoft Brokering File System Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2025-53809
Medium · 6.5
CWE-20 Sep 9, 2025
Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Improper input validation in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
CVE-2025-33073
High · 8.8
KEV Urgent · 70 Public exploit CWE-284 Jun 10, 2025
Microsoft Windows SMB Client Improper Access Control Vulnerability
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
CVE-2025-33053
High · 8.8
KEV Urgent · 74 Public exploit CWE-73 Jun 10, 2025
Microsoft Windows External Control of File Name or Path Vulnerability
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
CVE-2025-47827
Medium · 4.6
KEV High · 58 Public exploit CWE-347 Jun 5, 2025
IGEL OS Use of a Key Past its Expiration Date Vulnerability
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.
CVE-2025-32709
High · 7.8
KEV High · 59 Public exploit CWE-416 May 13, 2025
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-32706
High · 7.8
KEV High · 54 CWE-20 May 13, 2025
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-30400
High · 7.8
KEV High · 59 Public exploit CWE-416 May 13, 2025
Microsoft Windows DWM Core Library Use-After-Free Vulnerability
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
CVE-2025-32701
High · 7.8
KEV High · 52 CWE-416 May 13, 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-30397
High · 7.5
KEV Urgent · 70 Public exploit CWE-843 May 13, 2025
Microsoft Windows Scripting Engine Type Confusion Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
CVE-2025-29824
High · 7.8
KEV Urgent · 72 Public exploit Ransomware CWE-416 Apr 8, 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-26633
High · 7.0
KEV Urgent · 80 Public exploit Ransomware CWE-707 Mar 11, 2025
Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
CVE-2025-24991
Medium · 5.5
KEV High · 50 CWE-125 Mar 11, 2025
Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2025-24993
High · 7.8
KEV High · 53 CWE-122 Mar 11, 2025
Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
CVE-2025-24984
Medium · 4.6
KEV High · 50 CWE-532 Mar 11, 2025
Microsoft Windows NTFS Information Disclosure Vulnerability
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2025-24985
High · 7.8
KEV High · 61 Public exploit CWE-122 Mar 11, 2025
Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
CVE-2025-24054
Medium · 5.4
KEV High · 67 Public exploit CWE-73 Mar 11, 2025
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-21418
High · 7.8
KEV High · 53 CWE-122 Feb 11, 2025
Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVE-2025-21391
High · 7.1
KEV High · 53 CWE-59 Feb 11, 2025
Microsoft Windows Storage Link Following Vulnerability
Windows Storage Elevation of Privilege Vulnerability
CVE-2025-21333
High · 7.8
KEV High · 69 Public exploit CWE-122 Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21334
High · 7.8
KEV High · 52 CWE-416 Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21335
High · 7.8
KEV High · 52 CWE-416 Jan 14, 2025
Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2024-49138
High · 7.8
KEV Urgent · 70 Public exploit CWE-122 Dec 11, 2024
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2024-49039
High · 8.8
KEV Urgent · 71 Public exploit Ransomware CWE-287 Nov 12, 2024
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Windows Task Scheduler Elevation of Privilege Vulnerability
CVE-2024-43451
Medium · 6.5
KEV High · 59 Public exploit CWE-73 Nov 12, 2024
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
NTLM Hash Disclosure Spoofing Vulnerability