Microsoft Windows Server 2025 vulnerabilities, page 2
3,648 vulnerabilities
Known vulnerabilities in Microsoft Windows Server 2025, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-97824microsoftwindows_10_1607+28
EPSS score0.77%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97823microsoftwindows_10_1607+28EPSS score0.77%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97822microsoftwindows_10_1607+28EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97821microsoftwindows_10_1607+28EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97820microsoftwindows_10_1607+28EPSS score0.74%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97819microsoftwindows_10_1607+28EPSS score0.95%
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97817microsoftwindows_10_1607+28EPSS score0.95%
Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.CVE-2026-97816microsoftwindows_10_1809+20EPSS score0.89%
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.CVE-2026-97815microsoftwindows_10_1607+28EPSS score0.67%
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.CVE-2026-97814microsoftwindows_10_1607+28EPSS score0.97%
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.CVE-2026-97813microsoftwindows_10_1809+20EPSS score0.95%
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.CVE-2026-97812microsoftwindows_10_21h2+15EPSS score0.26%
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.CVE-2026-97811microsoftwindows_10_1809+20EPSS score0.23%
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.CVE-2026-97810microsoftwindows_11_24h2+10EPSS score0.26%
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.CVE-2026-97805microsoftwindows_10_1607+28EPSS score0.94%
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.CVE-2026-97804microsoftwindows_10_1607+24EPSS score0.32%
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.CVE-2026-97798microsoftwindows_10_21h2+16EPSS score0.34%
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.CVE-2026-97794microsoftwindows_11_23h2+12EPSS score0.31%
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.CVE-2026-97793microsoftwindows_10_1809+20EPSS score0.24%
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.CVE-2026-97792microsoftwindows_11_23h2+10EPSS score0.30%
Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.