microsoft / windows_server_2025
1,131 known vulnerabilities in microsoft windows_server_2025.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2026-61352 | Medium | 0.4% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-45636 | Medium | 0.4% | 7.8 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex… | |
| CVE-2026-54999 | Medium | 0.4% | 8.8 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-20923 | Medium | 0.4% | 7.8 | Use after free in Windows Management Services allows an authorized attacker to e… | |
| CVE-2026-62721 | Medium | 0.4% | 7.8 | Insufficient granularity of access control in User-Mode Power Service (UMPS) all… | |
| CVE-2026-68827 | Medium | 0.4% | 8.0 | Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized atta… | |
| CVE-2026-68838 | Medium | 0.4% | 8.0 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to ele… | |
| CVE-2026-42909 | Medium | 0.4% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-20822 | Medium | 0.4% | 7.8 | Use after free in Microsoft Graphics Component allows an authorized attacker to … | |
| CVE-2026-20842 | Medium | 0.4% | 7.0 | Use after free in Windows DWM allows an authorized attacker to elevate privilege… | |
| CVE-2026-20863 | Medium | 0.4% | 7.0 | Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate p… | |
| CVE-2026-20865 | Medium | 0.4% | 7.8 | Use after free in Windows Management Services allows an authorized attacker to e… | |
| CVE-2026-50697 | Medium | 0.4% | 7.8 | Exposure of sensitive information to an unauthorized actor in Windows Common Log… | |
| CVE-2026-56189 | Medium | 0.4% | 7.8 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unaut… | |
| CVE-2026-62816 | Medium | 0.4% | 8.8 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allow… | |
| CVE-2026-61925 | Medium | 0.4% | 7.8 | Incorrect authorization in Windows Installer allows an authorized attacker to el… | |
| CVE-2026-49791 | Medium | 0.4% | 7.1 | Improper link resolution before file access ('link following') in Windows Routin… | |
| CVE-2026-62712 | Medium | 0.4% | 7.8 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to el… | |
| CVE-2026-58613 | Medium | 0.4% | 7.8 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized at… | |
| CVE-2026-69585 | Medium | 0.4% | 7.8 | Incorrect type conversion or cast in Microsoft Windows Search Component allows a… | |
| CVE-2026-62803 | Medium | 0.4% | 7.8 | Improper link resolution before file access ('link following') in Windows DHCP S… | |
| CVE-2026-62807 | Medium | 0.4% | 7.8 | Improper link resolution before file access ('link following') in Windows DHCP S… | |
| CVE-2026-50454 | Medium | 0.4% | 7.8 | Relative path traversal in Windows User Interface Core allows an authorized atta… | |
| CVE-2026-50469 | Medium | 0.4% | 7.8 | Improper link resolution before file access ('link following') in Windows Projec… | |
| CVE-2026-20809 | Medium | 0.4% | 7.8 | Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allow… | |
| CVE-2026-49798 | Medium | 0.4% | 9.3 | Use after free in Windows Kernel allows an unauthorized attacker to elevate priv… | |
| CVE-2026-54128 | Medium | 0.4% | 8.4 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute… | |
| CVE-2026-50498 | Medium | 0.4% | 7.8 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege V… | |
| CVE-2026-50501 | Medium | 0.4% | 7.8 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an un… | |
| CVE-2026-58530 | Medium | 0.4% | 7.8 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an una… | |
| CVE-2026-58542 | Medium | 0.4% | 7.8 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to e… | |
| CVE-2026-62698 | Medium | 0.4% | 7.8 | Numeric truncation error in Microsoft Digest Authentication allows an authorized… | |
| CVE-2026-50348 | Medium | 0.4% | 7.0 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-50452 | Medium | 0.4% | 7.0 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-66802 | Medium | 0.4% | 8.1 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2026-49789 | Medium | 0.4% | 7.3 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to ele… | |
| CVE-2026-50482 | Medium | 0.4% | 7.3 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to exec… | |
| CVE-2026-58640 | Medium | 0.4% | 7.3 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to exec… | |
| CVE-2026-45607 | Medium | 0.4% | 8.4 | Out-of-bounds read in Windows Hyper-V allows an unauthorized attacker to execute… | |
| CVE-2026-62761 | Medium | 0.4% | 7.8 | Improper link resolution before file access ('link following') in Windows DHCP S… | |
| CVE-2026-45658 | Medium | 0.4% | 7.8 | Improper access control in Windows BitLocker allows an authorized attacker to by… | |
| CVE-2026-47652 | Medium | 0.3% | 8.2 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to e… | |
| CVE-2026-80093 | Medium | 0.3% | 7.0 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized at… | |
| CVE-2026-71343 | Medium | 0.3% | 7.8 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an… | |
| CVE-2026-40404 | Medium | 0.3% | 7.8 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege V… | |
| CVE-2026-69479 | Medium | 0.3% | 8.4 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex… | |
| CVE-2026-69638 | Medium | 0.3% | 8.4 | Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex… | |
| CVE-2026-69921 | Medium | 0.3% | 7.8 | Heap-based buffer overflow in Windows Print Spooler Components allows an authori… | |
| CVE-2026-70289 | Medium | 0.3% | 7.8 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorize… | |
| CVE-2026-49165 | Medium | 0.3% | 7.1 | Use of uninitialized resource in Microsoft Windows App Store allows an authorize… |