← Back

Windows Server 2025

windows_server_2025

Vendor: Microsoft • 1,902 CVEs

CVEs (1,902)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
1Microsoft
6Windows 11 23h2
Windows 11 24h2Windows 11 25h2+3 more
Aug 14, 2026
Aug 11, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 2, 2026
Aug 11, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 2, 2026
Aug 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
1Microsoft
6Windows 11 23h2
Windows 11 24h2Windows 11 25h2+3 more
Aug 13, 2026
Aug 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 2, 2026
Aug 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 2, 2026
Aug 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
1Microsoft
5Windows 11 23h2
Windows 11 24h2Windows 11 25h2+2 more
Aug 13, 2026
Aug 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
1Microsoft
5Windows 11 23h2
Windows 11 24h2Windows 11 25h2+2 more
Aug 13, 2026
Aug 11, 2026
N/A· v4
7.0 HIGH· v3
N/A· v2
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 2, 2026
Aug 11, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Aug 16, 2026
Aug 11, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.