windows server

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5074353 • MSRC update-guide entry Related CVEs: CVE-2025-54100 Affected components: Windows Server 2025 Microsoft summary: Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell allows an unauthorized […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5066840 • MSRC update-guide entry Related CVEs: CVE-2025-59295 CVE-2025-58739 CVE-2025-59208 Affected components: Windows Server 2025 Microsoft summary: Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5065435 • MSRC update-guide entry Related CVEs: CVE-2025-54107 CVE-2025-54917 Affected components: Windows Server 2025 Microsoft summary: Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5060996 • MSRC update-guide entry Related CVEs: CVE-2025-33053 Affected components: Windows Server 2025 Microsoft summary: External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5061026 • MSRC update-guide entry Related CVEs: CVE-2025-32712 CVE-2025-32713 CVE-2025-32714 CVE-2025-32724 CVE-2025-33064 CVE-2025-33066 CVE-2025-33075 CVE-2025-33053  +3 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Windows Win32K – GRFX […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5061072 • MSRC update-guide entry Related CVEs: CVE-2025-32712 CVE-2025-32713 CVE-2025-32714 CVE-2025-32724 CVE-2025-33064 CVE-2025-33066 CVE-2025-33075 CVE-2025-33056  +2 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Windows Win32K – GRFX […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5058380 • MSRC update-guide entry Related CVEs: CVE-2025-30397 Affected components: Windows Server 2025 Microsoft summary: Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5058449 • MSRC update-guide entry Related CVEs: CVE-2025-29959 CVE-2025-29960 CVE-2025-29969 CVE-2025-32701 CVE-2025-32706 CVE-2025-29830 CVE-2025-29832 CVE-2025-29836  +12 more Affected components: Windows Server 2025 Microsoft summary: Use of uninitialized resource in Windows Routing and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5061195 • MSRC update-guide entry Related CVEs: CVE-2025-32709 Affected components: Windows Server 2025 Microsoft summary: Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5061196 • MSRC update-guide entry Related CVEs: CVE-2025-32709 Affected components: Windows Server 2025 Microsoft summary: Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges […]