CVE Tools
Track your stack

Windows Server 2025

3,667 CVEs tracked. 42 of them are in CISA KEV.

This hub aggregates every CVE we track for Windows Server 2025, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Windows Server 2025 CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Windows Server 2025 CVEs per month
MonthCVEs
2024-1132
2024-1258
2025-01127
2025-0237
2025-0338
2025-0483
2025-0540
2025-0643
2025-0797
2025-0868
2025-0959
2025-10127
2025-1134
2025-1236
2026-0184
2026-0229
2026-0339
2026-04122
2026-0566
2026-06110
2026-07388
2026-08214
2026-09679
2026-101050

Severity

How the 3,667 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical1193%
  • High2,60471%
  • Medium93525%
  • Low90%

Latest CVEs

The 15 most recently published vulnerabilities affecting Windows Server 2025.

  1. CVE-2026-108136Microsoft Windows Search Component Elevation of Privilege Vulnerability7.8
  2. CVE-2026-105016Microsoft QUIC Remote Code Execution Vulnerability9.8
  3. CVE-2026-108130Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability7.8
  4. CVE-2026-108132Windows Kerberos Elevation of Privilege Vulnerability7.0
  5. CVE-2026-108129Role: DNS Server Information Disclosure Vulnerability6.5
  6. CVE-2026-108131Active Directory Federation Services (AD FS) Spoofing Vulnerability7.5
  7. CVE-2026-97841Role: DNS Server Information Disclosure Vulnerability6.5
  8. CVE-2026-97840Role: DNS Server Information Disclosure Vulnerability6.5
  9. CVE-2026-97844Role: DNS Server Information Disclosure Vulnerability6.5
  10. CVE-2026-97842Role: DNS Server Information Disclosure Vulnerability6.5
  11. CVE-2026-97843Role: DNS Server Information Disclosure Vulnerability6.5
  12. CVE-2026-97839Role: DNS Server Information Disclosure Vulnerability6.5
  13. CVE-2026-108127Role: DNS Server Information Disclosure Vulnerability6.5
  14. CVE-2026-108128Role: DNS Server Information Disclosure Vulnerability6.5
  15. CVE-2026-97827Role: DNS Server Information Disclosure Vulnerability6.5

Product grouping is registry-driven, with AI assist and human review. How it works