Windows Server 2025 (Server Core installation) at a glance
4 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 690 | 12 |
| Oct 2026 | 1,050 | 49 |
| Sep 2026 | 677 | 31 |
| Aug 2026 | 213 | 4 |
| Jul 2026 | 388 | 11 |
| Jun 2026 | 109 | 4 |
| May 2026 | 65 | 2 |
| Apr 2026 | 120 | 1 |
| Mar 2026 | 39 | 0 |
| Feb 2026 | 29 | 0 |
| Jan 2026 | 83 | 0 |
| Dec 2025 | 36 | 0 |
| Nov 2025 | 33 | 1 |
| Oct 2025 | 126 | 2 |
| Sep 2025 | 59 | 0 |
| Aug 2025 | 67 | 3 |
| Jul 2025 | 97 | 1 |
| Jun 2025 | 41 | 0 |
| May 2025 | 38 | 0 |
| Apr 2025 | 82 | 0 |
| Mar 2025 | 35 | 0 |
| Feb 2025 | 37 | 0 |
| Jan 2025 | 125 | 3 |
| Dec 2024 | 58 | 1 |
Most common weaknesses
Latest advisories
-
High max 9.8NCSC-2026-0472 13 CVEs
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft kwetsbaarheden verholpen in Windows.
-
High max 9.9NCSC-2026-0423 51 CVEs
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft 1159 kwetsbaarheden verholpen in Windows.
-
High max 9.8
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows.
-
Critical max 9.8NCSC-2026-0181 119 CVEs
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows.
-
High max 9.8
Kwetsbaarheden verholpen in Microsoft Windows
Microsoft heeft kwetsbaarheden verholpen in Windows.
first May 12, 2026
4,334 results · Feed
-
High 7.5
Active Directory Domain Services Elevation of Privilege Vulnerability
Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
-
High 7.8
Windows TPM Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
-
Medium 5.9
Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Security Account Manager allows an unauthorized attacker to bypass a security feature over a network.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Windows Kernel Transaction Manager Information Disclosure Vulnerability
Use of uninitialized resource in Kernel Transaction Manager allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Maps Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows SMB Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows SMB allows an authorized attacker to execute code over a network.
-
High 7.5
Windows iSCSI Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over a network.
-
High 7.0
Windows Task Scheduler Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.
-
Medium 6.8
HID Parser Library Elevation of Privilege Vulnerability
Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
-
High 8.8
Microsoft XPS Document Converter Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.
-
High 7.8
Microsoft Trace Data Helper Elevation of Privilege Vulnerability
Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows IKE Extension Spoofing Vulnerability
Insufficient granularity of access control in Windows IKE Extension allows an authorized attacker to perform spoofing locally.
-
High 7.0
Windows Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
Medium 6.8
Windows USB Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Driver allows an unauthorized attacker to elevate privileges with a physical attack.
-
High 7.8
Microsoft Windows Media Foundation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Client for NFS Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Remote Desktop Services Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
-
High 8.0
Windows Kerberos Elevation of Privilege Vulnerability
Weak authentication in Windows Kerberos allows an authorized attacker to elevate privileges over a network.
-
Medium 5.5
Windows Update Stack Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows Update Stack allows an authorized attacker to disclose information locally.
-
High 7.5
Windows Image Acquisition Remote Code Execution Vulnerability
Double free in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows NTLM Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
-
High 7.8
Microsoft Trace Data Helper Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Audio Service Elevation of Privilege Vulnerability
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Filter Manager Elevation of Privilege Vulnerability
Use after free in Windows Filter Manager allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Overlay Filter Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
-
High 7.1
Windows SMB Remote Code Execution Vulnerability
Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.
-
Medium 4.9
Windows DNS Server Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
Medium 5.9
Remote Procedure Call Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.
-
High 8.8
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
-
Medium 4.9
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.
-
High 7.5
Windows Graphics Kernel Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows Message Queuing Remote Code Execution Vulnerability
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
-
Medium 6.4
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows CredSSP Remote Code Execution Vulnerability
Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows Message Queuing Remote Code Execution Vulnerability
Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.