Windows Server at a glance
16 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
High max 9.8
Microsoft Windows: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um Administratorrechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offe…
first Jun 9, 2026 -
Critical max 9.8NCSC-2026-0181 119 CVEs
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows.
-
Critical max 9.8
Microsoft Windows: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erhöhen, um beliebigen Code auszuführen, um Informationen offenzulegen, Sicherheits…
first Nov 14, 2023 -
Critical max 9.8
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows und Microsoft Windows Server ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.
first Nov 11, 2025 -
High max 8.8
Microsoft Windows Server: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Ein entfernter, anonymer Angreifer, oder lokaler Angreifer, oder ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Microsoft Windows Server, Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows 10, Micr…
first May 13, 2025
755 results · Feed
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —CVE-2020-1436 EPSS 21%
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.F…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles o…
-
Unscored —CVE-2020-1435 EPSS 14%
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privileg…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit t…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash,…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects …
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory…
-
Unscored —
An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To explo…
-
Unscored —CVE-2020-1421 EPSS 75%
A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, a…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitiz…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —CVE-2020-1412 EPSS 14%
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, ak…
-
Unscored —CVE-2020-1410 EPSS 12%
A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploi…
-
Unscored —CVE-2020-1409 EPSS 12%
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Re…
-
Unscored —
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedde…
-
Unscored —CVE-2020-1407 EPSS 11%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memo…
-
Unscored —
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handl…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To …
-
Unscored —CVE-2020-1400 EPSS 24%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —CVE-2020-1401 EPSS 13%
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory,…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Wind…
-
Unscored —
An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.A…
-
Unscored —
An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle o…
-
Unscored —
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in mem…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memor…