microsoft windows server 2019 vulnerabilities, newest first, page 57
Filter
- 8.8CVE-2025-29962EPSS 16%
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
- 6.5CVE-2025-29961EPSS 1.4%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2025-29960EPSS 1.5%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2025-29959EPSS 1.5%
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2025-29958EPSS 1.4%
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 6.2CVE-2025-29957EPSS 0.6%
Uncontrolled resource consumption in Windows Deployment Services allows an unauthorized attacker to deny service locally.
- 5.4CVE-2025-29956EPSS 1.1%
Buffer over-read in Windows SMB allows an authorized attacker to disclose information over a network.
- 5.9CVE-2025-29954EPSS 1.5%
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2025-29842EPSS 0.4%
Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.
- 8.8CVE-2025-29840EPSS 1.0%
Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.
- 4.0CVE-2025-29839EPSS 0.5%
Out-of-bounds read in Windows File Server allows an unauthorized attacker to disclose information locally.
- 5.5CVE-2025-29837EPSS 0.7%
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.
- 6.5CVE-2025-29836EPSS 1.4%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 6.5CVE-2025-29835EPSS 1.4%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.7CVE-2025-29833EPSS 0.5%
Time-of-check time-of-use (toctou) race condition in Windows Virtual Machine Bus allows an unauthorized attacker to execute code locally.
- 6.5CVE-2025-29832EPSS 1.4%
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 7.5CVE-2025-29831EPSS 1.0%
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- 6.5CVE-2025-29830EPSS 1.4%
Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- 5.5CVE-2025-29829EPSS 0.6%
Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.
- 7.0CVE-2025-27468EPSS 0.3%
Improper privilege management in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2025-26677EPSS 1.8%
Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.
- 7.8CVE-2025-24063EPSS 0.7%
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-29824KEVEPSS 19%
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 7.5CVE-2025-29810EPSS 2.6%
Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
- 7.1CVE-2025-29809EPSS 4.3%
Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally.
- 5.5CVE-2025-27742EPSS 0.9%
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to disclose information locally.
- 7.8CVE-2025-27741EPSS 0.8%
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
- 8.8CVE-2025-27740EPSS 3.5%
Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.
- 7.8CVE-2025-27739EPSS 0.6%
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
- 6.5CVE-2025-27738EPSS 3.6%
Improper access control in Windows Resilient File System (ReFS) allows an authorized attacker to disclose information over a network.
- 8.6CVE-2025-27737EPSS 0.8%
Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally.
- 5.5CVE-2025-27736EPSS 0.9%
Exposure of sensitive information to an unauthorized actor in Windows Power Dependency Coordinator allows an authorized attacker to disclose information locally.
- 6.0CVE-2025-27735EPSS 0.4%
Insufficient verification of data authenticity in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
- 7.8CVE-2025-27733EPSS 0.7%
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
- 7.0CVE-2025-27732EPSS 0.3%
Sensitive data storage in improperly locked memory in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-27731EPSS 0.6%
Improper input validation in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-27730EPSS 0.6%
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally.
- 7.8CVE-2025-27727EPSS 1.0%
Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.
- 7.1CVE-2025-27491EPSS 1.4%
Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network.
- 8.0CVE-2025-27487EPSS 1.5%
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
- 7.5CVE-2025-27486EPSS 2.2%
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2025-27485EPSS 2.2%
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.5CVE-2025-27484EPSS 0.8%
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.
- 7.8CVE-2025-27483EPSS 0.8%
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
- 8.1CVE-2025-27482EPSS 1.6%
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- 8.8CVE-2025-27481EPSS 1.3%
Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- 8.1CVE-2025-27480EPSS 13%
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
- 7.5CVE-2025-27479EPSS 2.3%
Insufficient resource pool in Windows Kerberos allows an unauthorized attacker to deny service over a network.
- 7.0CVE-2025-27478EPSS 0.5%
Heap-based buffer overflow in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
- 8.8CVE-2025-27477EPSS 1.6%
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.