What’s Vulnerable › Products

Microsoft Windows Server 2025 vulnerabilities

3643 known vulnerabilities, 42 confirmed exploited in the wild (CISA KEV), 2844 published in the last 12 months.

Check whether your Microsoft Windows Server 2025 version is affected

Exploited Microsoft Windows Server 2025 vulnerabilities

• CVE-2026-96951 — Windows Shell Security Feature Bypass Vulnerability
• CVE-2026-81963 — Microsoft Windows Link Following Vulnerability
• CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
• CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2026-56155 — Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
• CVE-2026-32202 — Microsoft Windows Protection Mechanism Failure Vulnerability
• CVE-2025-60710 — Microsoft Windows Link Following Vulnerability
• CVE-2026-21533 — Microsoft Windows Improper Privilege Management Vulnerability
• CVE-2026-21525 — Microsoft Windows NULL Pointer Dereference Vulnerability
• CVE-2026-21519 — Microsoft Windows Type Confusion Vulnerability
• CVE-2026-21513 — Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability
• CVE-2026-21510 — Microsoft Windows Shell Protection Mechanism Failure Vulnerability
• CVE-2026-20805 — Microsoft Windows Information Disclosure Vulnerability
• CVE-2025-62221 — Microsoft Windows Use After Free Vulnerability
• CVE-2025-62215 — Microsoft Windows Race Condition Vulnerability
• CVE-2025-59287 — Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability
• CVE-2025-33073 — Microsoft Windows SMB Client Improper Access Control Vulnerability
• CVE-2025-59230 — Microsoft Windows Improper Access Control Vulnerability
• CVE-2025-24990 — Microsoft Windows Untrusted Pointer Dereference Vulnerability
• CVE-2025-47827 — IGEL OS Use of a Key Past its Expiration Date Vulnerability
• CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability
• CVE-2025-32709 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
• CVE-2025-32706 — Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
• CVE-2025-32701 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
• CVE-2025-30400 — Microsoft Windows DWM Core Library Use-After-Free Vulnerability

Latest Microsoft Windows Server 2025 vulnerabilities

• CVE-2026-97844 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97843 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97842 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97841 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97840 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97839 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97838 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97837 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97836 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97835 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97834 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97833 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97832 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97831 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97830 — Windows Internet Information Services Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-97829 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97828 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97827 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97826 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97825 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97824 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97823 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97822 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97821 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2026-97820 — Role: DNS Server Information Disclosure Vulnerability (CVSS 6.5)