CVE Tools
Track your stack

Windows Server 2025

4,357 CVEs tracked. 42 of them are in CISA KEV.

This hub aggregates every CVE we track for Windows Server 2025, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Windows Server 2025 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Windows Server 2025 CVEs per month
MonthCVEs
2024-1258
2025-01127
2025-0237
2025-0338
2025-0483
2025-0540
2025-0643
2025-0797
2025-0868
2025-0959
2025-10127
2025-1134
2025-1236
2026-0184
2026-0229
2026-0339
2026-04122
2026-0566
2026-06110
2026-07388
2026-08214
2026-09679
2026-101050
2026-11690

Severity

How the 4,357 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1303%
  • High3,09471%
  • Medium1,12226%
  • Low110%

Latest CVEs

The 15 most recently published vulnerabilities affecting Windows Server 2025.

  1. CVE-2026-118148Active Directory Domain Services Elevation of Privilege Vulnerability7.5
  2. CVE-2026-119382Windows TPM Elevation of Privilege Vulnerability7.8
  3. CVE-2026-122475Windows Storage Spaces Controller Remote Code Execution Vulnerability8.8
  4. CVE-2026-122474Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability5.9
  5. CVE-2026-122183Windows Kernel Elevation of Privilege Vulnerability7.8
  6. CVE-2026-122297Windows Kernel Transaction Manager Information Disclosure Vulnerability5.5
  7. CVE-2026-122182Windows Maps Elevation of Privilege Vulnerability7.0
  8. CVE-2026-122179Windows Internet Connection Sharing (ICS) Elevation of Privilege Vulnerability7.0
  9. CVE-2026-122177Windows iSCSI Elevation of Privilege Vulnerability7.5
  10. CVE-2026-122176Windows SMB Remote Code Execution Vulnerability8.8
  11. CVE-2026-122174Windows Task Scheduler Elevation of Privilege Vulnerability7.0
  12. CVE-2026-122173HID Parser Library Elevation of Privilege Vulnerability6.8
  13. CVE-2026-122172Microsoft Trace Data Helper Elevation of Privilege Vulnerability7.8
  14. CVE-2026-122171Microsoft XPS Document Converter Remote Code Execution Vulnerability8.8
  15. CVE-2026-122170Windows Win32k Elevation of Privilege Vulnerability7.0

Product grouping is registry-driven, with AI assist and human review. How it works