Login Request a demo
WS
Product
Windows Server 2025 (Server Core installation)
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
2,657
CVEs
41
On KEV
9.9
Max CVSS
1050
New 30D
Vulnerabilities2,657In the news12Timeline
Severity mix
Critical 115High 377Medium 8Low 0
Severity
All severities500Critical115High377Medium8Low0
Exploitation
On CISA KEV41Exploited in the wild41
Watch

Add Windows Server 2025 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43451
In wildKEV
6.5
84%
Nov 12
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2314
CVE-2026-21525
In wildKEV
6.2
5%
Feb 10
Windows Remote Access Connection Manager Denial of Service Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2026-20805
In wildKEV
5.5
7%
Jan 13
Desktop Window Manager Information Disclosure Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32230
CVE-2025-24991
In wildKEV
5.5
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2013-3900
In wildKEV
5.5
45%
Dec 11
WinVerifyTrust Signature Validation Vulnerability
Affected: All versions, or not specified
CVE-2025-24054
In wildKEV
5.4
62%
Mar 11
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2025-24984
In wildKEV
4.6
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2026-32202
In wildKEV
4.3
71%
Apr 14
Windows Shell Spoofing Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33158
Showing 8
The 500 most important CVEs for this product (exploited first, then by severity)