Microsoft Corp Windows Server 2025 (Server Core installation)

Name: Microsoft Corp Windows Server 2025 (Server Core installation)
Brand: Microsoft Corp

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

50critical259high42medium2low

updated 2026-10-27

vulnerabilities (1,836)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-59287US	—OT critical	100.0% (100th)	KEV	no fix	2025-10-14	≤ 10.0.26100.6899
CVE-2025-33053US	—OT critical	87.0% (100th)	KEV	no fix	2025-06-10	—
CVE-2024-43451US	—OT critical	84.3% (100th)	KEV	no fix	2024-11-12	—
CVE-2025-33073US	—OT critical	82.7% (100th)	KEV	no fix	2025-06-10	—
CVE-2026-33824US	—OT critical	77.1% (100th)	KEV	no fix	2026-04-14	≤ 10.0.26100.32690
CVE-2026-32202US	—OT critical	70.9% (99th)	KEV	no fix	2026-04-14	≤ 10.0.26100.32690
CVE-2025-24054US	medium5.4OT critical	62.3% (99th)	KEV	no fix	2025-03-11	—
CVE-2026-21510US	—OT critical	61.2% (99th)	KEV	no fix	2026-02-10	2 versions
CVE-2025-26633US	—OT critical	30.4% (98th)	KEV	no fix	2025-03-11	—
CVE-2025-30397US	—OT critical	27.3% (98th)	KEV	no fix	2025-05-13	—
CVE-2024-49138US	—OT critical	26.2% (98th)	KEV	no fix	2024-12-12	—
CVE-2025-29824US	—OT critical	19.3% (97th)	KEV	no fix	2025-04-08	—
CVE-2024-49039US	—OT critical	14.2% (97th)	KEV	no fix	2024-11-12	—
CVE-2025-21333US	—OT critical	10.1% (96th)	KEV	no fix	2025-01-14	—
CVE-2026-20805US	—OT critical	7.46% (94th)	KEV	no fix	2026-01-13	≤ 10.0.26100.7623
CVE-2025-24990US	—OT critical	6.37% (94th)	KEV	no fix	2025-10-14	≤ 10.0.26100.6899
CVE-2025-47827US	—OT critical	4.93% (92nd)	KEV	no fix	2025-06-05	≤ 10.0.26100.6899
CVE-2025-62215US	—OT critical	4.46% (91st)	KEV	no fix	2025-11-11	2 versions
CVE-2026-21533US	—OT critical	4.18% (91st)	KEV	no fix	2026-02-10	2 versions
CVE-2025-24985US	—OT critical	3.89% (90th)	KEV	no fix	2025-03-11	—
CVE-2025-62221US	—OT critical	2.50% (85th)	KEV	no fix	2025-12-09	2 versions
CVE-2025-30400US	—OT critical	1.92% (80th)	KEV	no fix	2025-05-13	—
CVE-2025-32709US	—OT critical	1.82% (79th)	KEV	no fix	2025-05-13	—
CVE-2026-81963US	high7.8OT critical	0.39% (33rd)	KEV	no fix	2026-09-08	≤ 10.0.26100.33438
CVE-2026-68820US	—OT critical	0.33% (26th)	KEV	no fix	2026-08-11	2 versions
CVE-2026-21513US	—OT critical	15.9% (97th)	KEV	no fix	2026-02-10	2 versions
CVE-2026-96951US	high8.8OT critical	9.81% (96th)	KEV	no fix	2026-10-13	≤ 10.0.26100.33650
CVE-2026-21525US	—OT critical	4.87% (92nd)	KEV	no fix	2026-02-10	2 versions
CVE-2025-59230US	—OT critical	2.66% (86th)	KEV	no fix	2025-10-14	≤ 10.0.26100.6899
CVE-2026-21519US	—OT critical	2.48% (84th)	KEV	no fix	2026-02-10	2 versions
CVE-2025-32706US	—OT critical	2.33% (83rd)	KEV	no fix	2025-05-13	—
CVE-2025-21391US	—OT critical	2.28% (83rd)	KEV	no fix	2025-02-11	—
CVE-2025-24993US	—OT critical	2.22% (83rd)	KEV	no fix	2025-03-11	—
CVE-2025-21418US	—OT critical	2.13% (82nd)	KEV	no fix	2025-02-11	—
CVE-2025-24991US	—OT critical	2.02% (81st)	KEV	no fix	2025-03-11	—
CVE-2025-24984US	—OT critical	1.99% (81st)	KEV	no fix	2025-03-11	—
CVE-2025-21334US	—OT critical	1.57% (75th)	KEV	no fix	2025-01-14	—
CVE-2025-32701US	—OT critical	1.42% (73rd)	KEV	no fix	2025-05-13	—
CVE-2025-21335US	—OT critical	1.40% (72nd)	KEV	no fix	2025-01-14	—
CVE-2026-56155US	—OT critical	0.35% (28th)	KEV	no fix	2026-07-14	≤ 10.0.26100.33158
CVE-2024-49113US	—	83.8% (100th)	Exploit	no fix	2024-12-12	—
CVE-2026-41089US	—	79.6% (100th)	Exploit	no fix	2026-05-12	2 versions
CVE-2025-21298US	—	74.4% (99th)	Exploit	no fix	2025-01-14	—
CVE-2024-49112US	—	72.2% (99th)	Exploit	no fix	2024-12-12	—
CVE-2026-49160US	—	56.6% (99th)	Exploit	no fix	2026-06-09	≤ 10.0.26100.32995
CVE-2025-47981US	—	41.1% (99th)	Exploit	no fix	2025-07-08	—
CVE-2025-50154US	—	29.8% (98th)	Exploit	no fix	2025-08-12	—
CVE-2025-54918US	—	25.3% (98th)	Exploit	no fix	2025-09-09	—
CVE-2025-24071US	—	23.3% (98th)	Exploit	no fix	2025-03-11	—
CVE-2025-55234US	critical9.8	20.6% (98th)	Exploit	no fix	2025-09-09	—

showing 50 of 1,836

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-416Use After Free427 CVEs
CWE-122Heap-based Buffer Overflow408 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')207 CVEs
CWE-125Out-of-bounds Read181 CVEs
CWE-190Integer Overflow or Wraparound73 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor70 CVEs
CWE-284Improper Access Control62 CVEs
CWE-20Improper Input Validation53 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)1,836 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan