microsoft / windows_server_2025
1,131 known vulnerabilities in microsoft windows_server_2025.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-69369 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose info… | |
| CVE-2026-69853 | Low | 0.3% | 4.7 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to… | |
| CVE-2026-69895 | Low | 0.3% | 4.7 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to dis… | |
| CVE-2026-50375 | Low | 0.3% | 6.3 | Heap-based buffer overflow in Windows DirectX allows an authorized attacker to e… | |
| CVE-2026-77491 | Low | 0.3% | 5.5 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose in… | |
| CVE-2026-32220 | Low | 0.3% | 4.4 | Improper access control in Windows Virtualization-Based Security (VBS) Enclave a… | |
| CVE-2026-65777 | Low | 0.3% | 5.3 | Inadequate encryption strength in Windows Active Directory allows an authorized … | |
| CVE-2026-59131 | Low | 0.3% | 5.6 | No cwe for this issue in AMD Zen allows an authorized attacker to disclose infor… | |
| CVE-2026-61936 | Low | 0.3% | 5.5 | Missing authorization in Windows Defender Firewall Service allows an authorized … | |
| CVE-2026-72966 | Low | 0.3% | 5.5 | Missing authorization in Windows Remote Access Connection Manager allows an auth… | |
| CVE-2026-68830 | Low | 0.3% | 5.5 | Improper link resolution before file access ('link following') in Windows Univer… | |
| CVE-2026-34346 | Low | 0.3% | 5.5 | Cleartext transmission of sensitive information in Windows Ancillary Function Dr… | |
| CVE-2026-49174 | Low | 0.3% | 6.1 | Missing authentication for critical function in Microsoft Windows DNS allows an … | |
| CVE-2026-50303 | Low | 0.3% | 5.5 | Use of a cryptographic primitive with a risky implementation in Windows Key Guar… | |
| CVE-2026-50418 | Low | 0.3% | 5.1 | Improper access control in Windows System allows an unauthorized attacker to byp… | |
| CVE-2026-62883 | Low | 0.3% | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate… | |
| CVE-2026-65795 | Low | 0.3% | 6.7 | Relative path traversal in Windows DNS allows an authorized attacker to elevate … | |
| CVE-2026-65797 | Low | 0.3% | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate… | |
| CVE-2026-65798 | Low | 0.3% | 6.7 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate… | |
| CVE-2026-69267 | Low | 0.3% | 6.5 | Insufficient granularity of access control in Windows Connected User Experiences… | |
| CVE-2026-69878 | Low | 0.3% | 6.4 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker … | |
| CVE-2026-71338 | Low | 0.3% | 6.4 | Double free in Windows Failover Cluster allows an authorized attacker to elevate… | |
| CVE-2026-62757 | Low | 0.3% | 5.3 | Improper verification of cryptographic signature in Windows Schannel allows an u… | |
| CVE-2026-65799 | Low | 0.3% | 6.7 | Integer overflow or wraparound in Windows DNS allows an authorized attacker to e… | |
| CVE-2026-58543 | Low | 0.2% | 6.3 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-68849 | Low | 0.2% | 4.7 | Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacke… | |
| CVE-2026-58638 | Low | 0.2% | 6.0 | Missing cryptographic step in Windows Boot Loader allows an authorized attacker … | |
| CVE-2026-73004 | Low | 0.2% | 5.5 | Missing authentication for critical function in Windows Autopilot allows an auth… | |
| CVE-2026-61928 | Low | 0.2% | 5.5 | Cleartext storage of sensitive information in Windows Hello allows an authorized… | |
| CVE-2026-77887 | Low | 0.2% | 6.4 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execu… | |
| CVE-2026-77891 | Low | 0.2% | 6.4 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execu… |
← Prev Page 23 of 23