Windows Server 2025 vulnerabilities | LiveThreat CVE Feed

Product

Windows Server 2025

by Microsoft · last CVE Oct 13, 2026

On CISA KEVExploited in the wildRansomware-linked

3,644

CVEs

On KEV

9.9

Max CVSS

1050

New 30D

Vulnerabilities3,644 In the news12 Timeline

Severity mix

Critical 130High 361Medium 9Low 0

Severity

All severities500 Critical130 High361 Medium9 Low0

Exploitation

On CISA KEV42 Exploited in the wild42

Watch

Add Windows Server 2025 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-45648	8.8	1%	Jun 9	Windows Active Directory Domain Services Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32995
CVE-2026-40403	8.8	0%	May 12	Windows Graphics Component Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32860
CVE-2026-34329	8.8	0%	May 12	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32860
CVE-2026-32225	8.8	1%	Apr 14	Windows Shell Security Feature Bypass Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32690
CVE-2026-26178	8.8	0%	Apr 14	Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32690
CVE-2026-32157	8.8	1%	Apr 14	Remote Desktop Client Remote Code Execution Vulnerability Affected: before 10.0.26100.32690
CVE-2026-25188	8.8	1%	Mar 10	Windows Telephony Service Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32522
CVE-2026-25177	8.8	1%	Mar 10	Active Directory Domain Services Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32522
CVE-2026-24283	8.8	0%	Mar 10	Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32522
CVE-2026-23669	8.8	1%	Mar 10	RPC Runtime Library Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32522
CVE-2026-21255	8.8	0%	Feb 10	Windows Hyper-V Security Feature Bypass Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32370
CVE-2026-20868	8.8	1%	Jan 13	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.32230
CVE-2025-64678	8.8	1%	Dec 9	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.7171
CVE-2025-62549	8.8	1%	Dec 9	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.7462
CVE-2025-62456	8.8	1%	Dec 9	Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.7462
CVE-2025-58718	8.8	1%	Oct 14	Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.6899
CVE-2025-59295	8.8	2%	Oct 14	Windows URL Parsing Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.6899
CVE-2025-58716	8.8	0%	Oct 14	Windows Speech Runtime Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.6899
CVE-2025-58715	8.8	0%	Oct 14	Windows Speech Runtime Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.6899
CVE-2025-54113	8.8	1%	Sep 9	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.6584
CVE-2025-54918	8.8	25%	Sep 9	Windows NTLM Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.6584
CVE-2025-54110	8.8	5%	Sep 9	Windows Kernel Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.6584
CVE-2025-54106	8.8	1%	Sep 9	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.6584
CVE-2025-53778	8.8	51%	Aug 12	Windows NTLM Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4946
CVE-2025-53145	8.8	8%	Aug 12	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4946
CVE-2025-53144	8.8	8%	Aug 12	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4946
CVE-2025-53143	8.8	9%	Aug 12	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4946
CVE-2025-53131	8.8	1%	Aug 12	Windows Media Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4946
CVE-2025-50163	8.8	1%	Aug 12	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4946
CVE-2025-49757	8.8	1%	Aug 12	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49740	8.8	1%	Jul 8	Windows SmartScreen Security Feature Bypass Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49729	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49724	8.8	10%	Jul 8	Windows Connected Devices Platform Service Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49673	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49669	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49668	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49663	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-48817	8.8	1%	Jul 8	Remote Desktop Client Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-47998	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49753	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49723	8.8	0%	Jul 8	Windows StateRepository API Server file Tampering Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49688	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49687	8.8	0%	Jul 8	Windows Input Method Editor (IME) Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49676	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49674	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49672	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-49657	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-48824	8.8	1%	Jul 8	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-47986	8.8	0%	Jul 8	Universal Print Management Service Elevation of Privilege Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4652
CVE-2025-33066	8.8	1%	Jun 10	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Affected: 10.0.26100.0 before 10.0.26100.4349