Microsoft Windows Server 2025 vulnerabilities
3,604 published vulnerabilities in Microsoft Windows Server 2025, 42 of them exploited in the wild. The most were published in 2026 (2736), and 2736 so far in 2026.
Microsoft Windows Server 2025 vulnerabilities by year
2013
2024
2025
2026
Most exploited Microsoft Windows Server 2025 vulnerabilities
- CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free
- CVE-2025-59287 Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data
- CVE-2026-96951 Microsoft Windows Command Injection
- CVE-2026-21510 Microsoft Windows Shell Protection Mechanism Failure
- CVE-2026-21513 Microsoft MSHTML Framework Protection Mechanism Failure
- CVE-2025-33053 Microsoft Windows External Control of File Name or Path
- CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control
- CVE-2024-49039 Microsoft Windows Task Scheduler Privilege Escalation
- CVE-2026-81963 Microsoft Windows Link Following
- CVE-2026-56155 Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
- CVE-2026-21519 Microsoft Windows Type Confusion
- CVE-2026-21533 Microsoft Windows Improper Privilege Management
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.