microsoft / windows_server_2025
1,131 known vulnerabilities in microsoft windows_server_2025.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-62815 | Medium | 1.2% | 9.8 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code… | |
| CVE-2026-69587 | Medium | 1.2% | 7.5 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacke… | |
| CVE-2026-69588 | Medium | 1.2% | 7.5 | Missing release of memory after effective lifetime in Windows TCP/IP allows an u… | |
| CVE-2026-32225 | Medium | 1.2% | 8.8 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to… | |
| CVE-2026-20921 | Medium | 1.2% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-69881 | Medium | 1.2% | 7.5 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacke… | |
| CVE-2026-40378 | Medium | 1.2% | 7.5 | Memory allocation with excessive size value in Windows Local Security Authority … | |
| CVE-2026-49787 | Medium | 1.2% | 7.5 | Allocation of resources without limits or throttling in Windows HTTP.sys allows … | |
| CVE-2026-49788 | Medium | 1.2% | 7.5 | Allocation of resources without limits or throttling in HTTP/2 allows an unautho… | |
| CVE-2026-50304 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50355 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50368 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50411 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allo… | |
| CVE-2026-50424 | Medium | 1.2% | 7.5 | Untrusted pointer dereference in Windows Domain Controller allows an unauthorize… | |
| CVE-2026-50496 | Medium | 1.2% | 7.5 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized … | |
| CVE-2026-50647 | Medium | 1.2% | 7.5 | Loop with unreachable exit condition ('infinite loop') in Active Directory Feder… | |
| CVE-2026-50695 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50696 | Medium | 1.2% | 7.5 | Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allow… | |
| CVE-2026-54119 | Medium | 1.2% | 7.5 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directo… | |
| CVE-2026-70065 | Medium | 1.2% | 7.5 | Missing release of memory after effective lifetime in Windows DHCP Server allows… | |
| CVE-2026-77494 | Medium | 1.2% | 7.5 | Access of resource using incompatible type ('type confusion') in Windows DHCP Se… | |
| CVE-2026-49181 | Medium | 1.2% | 7.5 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthor… | |
| CVE-2026-20856 | Medium | 1.1% | 8.1 | Improper input validation in Windows Server Update Service allows an unauthorize… | |
| CVE-2026-54113 | Medium | 1.1% | 7.5 | Allocation of resources without limits or throttling in Windows Kernel allows an… | |
| CVE-2026-69342 | Medium | 1.1% | 7.5 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den… | |
| CVE-2026-69428 | Medium | 1.1% | 7.5 | Out-of-bounds read in Windows LDAP - Lightweight Directory Access Protocol allow… | |
| CVE-2026-77895 | Medium | 1.1% | 7.5 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to den… | |
| CVE-2026-45648 | Medium | 1.1% | 8.8 | Stack-based buffer overflow in Active Directory Domain Services allows an author… | |
| CVE-2026-56186 | Medium | 1.1% | 8.1 | Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose… | |
| CVE-2026-20854 | Medium | 1.1% | 7.5 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) all… | |
| CVE-2026-20922 | Medium | 1.1% | 7.8 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to exec… | |
| CVE-2026-44815 | Medium | 1.1% | 9.8 | Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attack… | |
| CVE-2026-50429 | Medium | 1.1% | 8.2 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose… | |
| CVE-2026-69525 | Medium | 1.0% | 9.8 | Use after free in Windows Remote Desktop Services allows an unauthorized attacke… | |
| CVE-2026-69829 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to e… | |
| CVE-2026-48573 | Medium | 1.0% | 7.9 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to by… | |
| CVE-2026-48576 | Medium | 1.0% | 7.9 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to by… | |
| CVE-2026-50463 | Medium | 1.0% | 7.5 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose… | |
| CVE-2026-50470 | Medium | 1.0% | 7.5 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized … | |
| CVE-2026-69443 | Medium | 1.0% | 7.5 | Out-of-bounds read in Windows Device Health Attestation (DHA) allows an unauthor… | |
| CVE-2026-20849 | Medium | 1.0% | 7.5 | Reliance on untrusted inputs in a security decision in Windows Kerberos allows a… | |
| CVE-2026-69496 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized a… | |
| CVE-2026-42990 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized atta… | |
| CVE-2026-49172 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacke… | |
| CVE-2026-50447 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows Message Queuing allows an unauthorized att… | |
| CVE-2026-50518 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacke… | |
| CVE-2026-56159 | Medium | 1.0% | 9.8 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacke… | |
| CVE-2026-56190 | Medium | 1.0% | 9.8 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to … | |
| CVE-2026-69910 | Medium | 1.0% | 9.8 | Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker t… | |
| CVE-2026-62818 | Medium | 1.0% | 8.8 | Use after free in Active Directory Certificate Services (AD CS) allows an author… |