Microsoft

Windows Server 2025

1702 vulnerabilities found.

Please note: This list may be incomplete. Data is provided in its original format, subject to change.
8.3

CVE-2026-56181

Media report
  • EPSS 0.24%
  • Published 14.07.2026 17:10:17
  • Last modified 22.07.2026 16:18:26

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

5.5

CVE-2026-58638

  • EPSS 0.23%
  • Published 14.07.2026 17:10:16
  • Last modified 22.07.2026 16:18:42

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

7

CVE-2026-58637

  • EPSS 0.23%
  • Published 14.07.2026 17:10:15
  • Last modified 22.07.2026 16:18:42

Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

7.8

CVE-2026-58632

  • EPSS 0.29%
  • Published 14.07.2026 17:10:14
  • Last modified 22.07.2026 16:18:42

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

7.8

CVE-2026-58628

  • EPSS 0.18%
  • Published 14.07.2026 17:10:13
  • Last modified 22.07.2026 16:18:41

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

7

CVE-2026-58629

  • EPSS 0.23%
  • Published 14.07.2026 17:10:13
  • Last modified 29.07.2026 19:16:47

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

8.8

CVE-2026-58626

  • EPSS 0.85%
  • Published 14.07.2026 17:10:12
  • Last modified 22.07.2026 16:18:41

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

7.5

CVE-2026-58627

  • EPSS 0.87%
  • Published 14.07.2026 17:10:12
  • Last modified 17.07.2026 02:30:37

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

7

CVE-2026-58619

  • EPSS 0.23%
  • Published 14.07.2026 17:10:11
  • Last modified 22.07.2026 16:18:41

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

7.8

CVE-2026-58613

Exploit
  • EPSS 0.45%
  • Published 14.07.2026 17:10:10
  • Last modified 22.07.2026 16:18:40

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.