Skip to contentMicrosoft Windows Server 2025 vulnerabilities
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-552256.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreDirectX Graphics Kernel Elevation of Privilege VulnerabilityCVE-2025-552237.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Graphics Component Remote Code Execution VulnerabilityCVE-2025-549197.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows NTLM Elevation of Privilege VulnerabilityCVE-2025-54918Public exploitEPSS 27.2%8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows NTFS Remote Code Execution VulnerabilityCVE-2025-549167.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows UI XAML Maps MapControlSettings Elevation of Privilege VulnerabilityCVE-2025-549137.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreSPNEGO Extended Negotiation (NEGOEX) Security Mechanism Elevation of Privilege VulnerabilityCVE-2025-548957.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreLocal Security Authority Subsystem Service Elevation of Privilege VulnerabilityCVE-2025-548947.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows UI XAML Phone DatePickerFlyout Elevation of Privilege VulnerabilityCVE-2025-541117.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Kernel Elevation of Privilege VulnerabilityCVE-2025-54110Public exploit8.8 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +9 more +11 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2025-541068.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Connected Devices Platform Service Elevation of Privilege VulnerabilityCVE-2025-541027.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2025-540997.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-540976.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-540966.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-540956.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-537986.5 Medium
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-537976.5 Medium
- microsoft powershell, powershell 7.4, powershell 7.5 +24 more +26 morePowerShell Direct Elevation of Privilege VulnerabilityCVE-2025-49734Fix available7.0 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +7 more +9 moreWindows Storage-based Management Service Remote Code Execution VulnerabilityCVE-2025-552317.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Certificate Spoofing VulnerabilityCVE-2025-552295.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows MBT Transport Driver Elevation of Privilege VulnerabilityCVE-2025-552307.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Hyper-V Remote Code Execution VulnerabilityCVE-2025-488076.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows StateRepository API Server file Elevation of Privilege VulnerabilityCVE-2025-537897.8 High
- microsoft windows server 2025, windows server 2025 (server core installation) +1 moreWindows Kerberos Elevation of Privilege VulnerabilityCVE-2025-53779Public exploit7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows NTLM Elevation of Privilege VulnerabilityCVE-2025-53778EPSS 40.5%8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege VulnerabilityCVE-2025-501557.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-501575.7 Medium
- microsoft 365 copilot, office for android, office for universal +36 more +38 moreGDI+ Remote Code Execution VulnerabilityCVE-2025-53766EPSS 11.5%9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege VulnerabilityCVE-2025-537267.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege VulnerabilityCVE-2025-537257.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Push Notifications Apps Elevation of Privilege VulnerabilityCVE-2025-537247.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Hyper-V Elevation of Privilege VulnerabilityCVE-2025-537237.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Remote Desktop Services Denial of Service VulnerabilityCVE-2025-53722EPSS 31.8%7.5 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Connected Devices Platform Service Elevation of Privilege VulnerabilityCVE-2025-537217.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2025-537208.0 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-537195.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2025-537187.0 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Local Security Authority Subsystem Service (LSASS) Denial of Service VulnerabilityCVE-2025-537166.5 Medium
- microsoft windows 11 version 24h2, windows server 2022, 23h2 edition (server core installation), windows server 2025 +3 more +5 moreWindows Storage Port Driver Information Disclosure VulnerabilityCVE-2025-531565.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Hyper-V Elevation of Privilege VulnerabilityCVE-2025-531557.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2025-531547.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-531535.7 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Kernel Elevation of Privilege VulnerabilityCVE-2025-531517.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreKernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityCVE-2025-531497.8 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2008 service pack 2 +15 more +17 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2025-531485.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityCVE-2025-531477.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2025-53145EPSS 11.6%8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2025-53144EPSS 11.6%8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityCVE-2025-53143EPSS 12.3%8.8 High
- Show moreLoading…