Login Request a demo
WS
Product
Windows Server 2025 (Server Core installation)
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
2,657
CVEs
41
On KEV
9.9
Max CVSS
1050
New 30D
Vulnerabilities2,657In the news12Timeline
Severity mix
Critical 115High 377Medium 8Low 0
Severity
All severities500Critical115High377Medium8Low0
Exploitation
On CISA KEV41Exploited in the wild41
Watch

Add Windows Server 2025 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-96951
In wildKEV
8.8
10%
Oct 13
Windows Shell Security Feature Bypass Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-21510
In wildKEV
8.8
61%
Feb 10
Windows Shell Security Feature Bypass Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2026-21513
In wildKEV
8.8
16%
Feb 10
MSHTML Framework Security Feature Bypass Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2025-33073
In wildKEV
8.8
83%
Jun 10
Windows SMB Client Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4349
CVE-2025-33053
In wildKEV
8.8
87%
Jun 10
Internet Shortcut Files Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4349
CVE-2024-49039
RansomwareIn wildKEV
8.8
14%
Nov 12
Windows Task Scheduler Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2314
CVE-2026-81963
In wildKEV
7.8
0%
Sep 8
Windows Update Stack Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33438
CVE-2026-56155
In wildKEV
7.8
0%
Jul 14
Active Directory Federation Services Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33158
CVE-2026-21533
In wildKEV
7.8
4%
Feb 10
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2026-21519
In wildKEV
7.8
2%
Feb 10
Desktop Window Manager Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2025-62221
In wildKEV
7.8
3%
Dec 9
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.7462
CVE-2025-60710
RansomwareIn wildKEV
7.8
5%
Nov 11
Host Process for Windows Tasks Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.7462
CVE-2025-59230
In wildKEV
7.8
3%
Oct 14
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.6899
CVE-2025-24990
In wildKEV
7.8
6%
Oct 14
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.6899
CVE-2025-32709
In wildKEV
7.8
2%
May 13
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-32706
In wildKEV
7.8
2%
May 13
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-32701
In wildKEV
7.8
1%
May 13
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-30400
In wildKEV
7.8
2%
May 13
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-29824
RansomwareIn wildKEV
7.8
19%
Apr 8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3775
CVE-2025-24993
In wildKEV
7.8
2%
Mar 11
Windows NTFS Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2025-24985
In wildKEV
7.8
4%
Mar 11
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2025-21418
In wildKEV
7.8
2%
Feb 11
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3194
CVE-2025-21334
In wildKEV
7.8
2%
Jan 14
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2894
CVE-2025-21333
In wildKEV
7.8
10%
Jan 14
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2894
CVE-2025-21335
In wildKEV
7.8
1%
Jan 14
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2894
CVE-2024-49138
In wildKEV
7.8
26%
Dec 10
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2605
CVE-2025-30397
In wildKEV
7.5
27%
May 13
Scripting Engine Memory Corruption Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-21391
In wildKEV
7.1
2%
Feb 11
Windows Storage Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3194
CVE-2026-68820
In wildKEV
7.0
0%
Aug 11
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33296
CVE-2025-62215
In wildKEV
7.0
4%
Nov 11
Windows Kernel Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.7171
CVE-2025-26633
RansomwareIn wildKEV
7.0
30%
Mar 11
Microsoft Management Console Security Feature Bypass Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2026-105007
8.8
1%
Oct 13
Windows NDIS Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-103575
8.8
1%
Oct 13
Remote Desktop Client Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-102225
8.8
1%
Oct 13
Windows Text Shaping Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-102217
8.8
1%
Oct 13
WebDAV Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-102214
8.8
0%
Oct 13
Windows Hyper-V Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-102203
8.8
1%
Oct 13
RPC Runtime Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-88219
8.8
1%
Oct 13
RPC Runtime Library Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-100220
8.8
1%
Oct 13
Windows Media Video Decoder Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-96952
8.8
1%
Oct 13
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-96917
8.8
0%
Oct 13
Windows PCI Bus Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-96914
8.8
0%
Oct 13
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-88116
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-88114
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-88112
8.8
1%
Oct 13
Windows Domain Name Service Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-70250
8.8
0%
Oct 13
Windows DHCP Client Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-70158
8.8
1%
Oct 13
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-88142
8.8
1%
Oct 13
Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-88115
8.8
1%
Oct 13
Windows Server for NFS Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-83934
8.8
1%
Oct 13
Windows GDI+ Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
Page 1 of 8 · 377 total
12…8
The 500 most important CVEs for this product (exploited first, then by severity)