Login Request a demo
WS
Product
Windows Server 2025
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
3,644
CVEs
42
On KEV
9.9
Max CVSS
1050
New 30D
Vulnerabilities3,644In the news12Timeline
Severity mix
Critical 127High 364Medium 9Low 0
Severity
All severities500Critical127High364Medium9Low0
Exploitation
On CISA KEV42Exploited in the wild42
Watch

Add Windows Server 2025 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33824
In wildKEV
9.8
77%
Apr 14
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32690
CVE-2025-59287
In wildKEV
9.8
100%
Oct 14
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.6905
Showing 2
The 500 most important CVEs for this product (exploited first, then by severity)