Login Request a demo
WS
Product
Windows Server 2025
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
3,644
CVEs
42
On KEV
9.9
Max CVSS
1050
New 30D
Vulnerabilities3,644In the news12Timeline
Severity mix
Critical 127High 364Medium 9Low 0
Severity
All severities500Critical127High364Medium9Low0
Exploitation
On CISA KEV42Exploited in the wild42
Watch

Add Windows Server 2025 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33824
In wildKEV
9.8
77%
Apr 14
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32690
CVE-2025-59287
In wildKEV
9.8
100%
Oct 14
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.6905
CVE-2026-96951
In wildKEV
8.8
10%
Oct 13
Windows Shell Security Feature Bypass Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33650
CVE-2026-21510
In wildKEV
8.8
61%
Feb 10
Windows Shell Security Feature Bypass Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2026-21513
In wildKEV
8.8
16%
Feb 10
MSHTML Framework Security Feature Bypass Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2025-33073
In wildKEV
8.8
83%
Jun 10
Windows SMB Client Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4349
CVE-2025-33053
In wildKEV
8.8
87%
Jun 10
Internet Shortcut Files Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4349
CVE-2024-49039
RansomwareIn wildKEV
8.8
14%
Nov 12
Windows Task Scheduler Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2314
CVE-2026-81963
In wildKEV
7.8
0%
Sep 8
Windows Update Stack Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33438
CVE-2026-56155
In wildKEV
7.8
0%
Jul 14
Active Directory Federation Services Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33158
CVE-2026-21533
In wildKEV
7.8
4%
Feb 10
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2026-21519
In wildKEV
7.8
2%
Feb 10
Desktop Window Manager Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2025-62221
In wildKEV
7.8
3%
Dec 9
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.7462
CVE-2025-60710
RansomwareIn wildKEV
7.8
5%
Nov 11
Host Process for Windows Tasks Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.7462
CVE-2025-59230
In wildKEV
7.8
3%
Oct 14
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.6899
CVE-2025-24990
In wildKEV
7.8
6%
Oct 14
Windows Agere Modem Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.6899
CVE-2025-32709
In wildKEV
7.8
2%
May 13
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-32706
In wildKEV
7.8
2%
May 13
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-32701
In wildKEV
7.8
1%
May 13
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-30400
In wildKEV
7.8
2%
May 13
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-29824
RansomwareIn wildKEV
7.8
19%
Apr 8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3775
CVE-2025-24993
In wildKEV
7.8
2%
Mar 11
Windows NTFS Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2025-24985
In wildKEV
7.8
4%
Mar 11
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2025-21418
In wildKEV
7.8
2%
Feb 11
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3194
CVE-2025-21334
In wildKEV
7.8
2%
Jan 14
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2894
CVE-2025-21333
In wildKEV
7.8
10%
Jan 14
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2894
CVE-2025-21335
In wildKEV
7.8
1%
Jan 14
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2894
CVE-2024-49138
In wildKEV
7.8
26%
Dec 10
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2605
CVE-2025-30397
In wildKEV
7.5
27%
May 13
Scripting Engine Memory Corruption Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.4061
CVE-2025-21391
In wildKEV
7.1
2%
Feb 11
Windows Storage Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3194
CVE-2026-68820
In wildKEV
7.0
0%
Aug 11
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33296
CVE-2025-62215
In wildKEV
7.0
4%
Nov 11
Windows Kernel Elevation of Privilege Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.7171
CVE-2025-26633
RansomwareIn wildKEV
7.0
30%
Mar 11
Microsoft Management Console Security Feature Bypass Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2024-43451
In wildKEV
6.5
84%
Nov 12
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.2314
CVE-2026-21525
In wildKEV
6.2
5%
Feb 10
Windows Remote Access Connection Manager Denial of Service Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2026-20805
In wildKEV
5.5
7%
Jan 13
Desktop Window Manager Information Disclosure Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.32230
CVE-2025-24991
In wildKEV
5.5
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2013-3900
In wildKEV
5.5
45%
Dec 11
WinVerifyTrust Signature Validation Vulnerability
Affected: All versions, or not specified
CVE-2025-24054
In wildKEV
5.4
62%
Mar 11
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2025-47827
In wildKEV
4.6
5%
Jun 5
IGEL OS Use of a Key Past its Expiration Date Vulnerability
Affected: before 10.0.26100.6899
CVE-2025-24984
In wildKEV
4.6
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.3476
CVE-2026-32202
In wildKEV
4.3
71%
Apr 14
Windows Shell Spoofing Vulnerability
Affected: 10.0.26100.0 before 10.0.26100.33158
Showing 42
The 500 most important CVEs for this product (exploited first, then by severity)