Windows Server

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5072014 • MSRC update-guide entry Related CVEs: CVE-2025-62454 CVE-2025-62456 CVE-2025-62457 CVE-2025-62466 CVE-2025-62469 CVE-2025-62470 CVE-2025-62472 CVE-2025-62473  +12 more Affected components: Windows Server 2025 Microsoft summary: Heap-based buffer overflow in Windows Cloud Files Mini […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5065306 • MSRC update-guide entry Related CVEs: CVE-2025-54918 CVE-2025-55226 CVE-2025-55228 CVE-2025-55236 CVE-2025-53799 CVE-2025-53800 CVE-2025-55224 CVE-2025-48807  +12 more Affected components: Windows Server 2025 Microsoft summary: Improper authentication in Windows NTLM allows an authorized […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read  •  Source: Microsoft KB5050013 • MSRC update-guide entry Related CVEs: CVE-2025-21294 CVE-2025-21295 CVE-2025-21296 CVE-2025-21298 CVE-2025-21307 CVE-2025-21411 CVE-2025-21413 CVE-2025-21210  +12 more Affected components: Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read  •  Source: Microsoft KB5051972 • MSRC update-guide entry Related CVEs: CVE-2025-21377 Affected components: Windows Server 2019 (Server Core installation) Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read  •  Source: Microsoft KB5053620 • MSRC update-guide entry Related CVEs: CVE-2025-24035 CVE-2025-24064 CVE-2025-26645 CVE-2024-9157 CVE-2025-24987 CVE-2025-24988 CVE-2025-21180 CVE-2025-24996  +12 more Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Sensitive data storage in improperly […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read  •  Source: Microsoft KB5068840 • MSRC update-guide entry Related CVEs: CVE-2025-60724 CVE-2025-64678 CVE-2025-59505 CVE-2025-59506 CVE-2025-59507 CVE-2025-59508 CVE-2025-59510 CVE-2025-59512  +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Microsoft summary: Heap-based buffer […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2025 📖 ~4 min read  •  Source: Microsoft KB5058454 • MSRC update-guide entry Related CVEs: CVE-2025-32710 CVE-2025-29966 CVE-2025-29967 CVE-2025-47955 CVE-2025-29959 CVE-2025-29960 CVE-2025-29969 CVE-2025-32701  +12 more Affected components: Windows Server 2025 Microsoft summary: Use after free in Windows Remote Desktop Services […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2022 📖 ~4 min read  •  Source: Microsoft KB5058405 • MSRC update-guide entry Related CVEs: CVE-2025-29966 CVE-2025-29967 CVE-2025-29833 CVE-2025-55229 CVE-2025-47955 CVE-2025-29959 CVE-2025-29960 CVE-2025-29964  +12 more Affected components: Windows Server 2022 Windows Server 2022, 23H2 Edition (Server Core installation) Microsoft summary: […]

🔴 Critical   ⏱ 15–90 min  Last verified: 25 May 2026 Affected versions: Windows Server 2016 📖 ~4 min read  •  Source: Microsoft KB5055526 • MSRC update-guide entry Related CVEs: CVE-2025-26663 CVE-2025-26686 CVE-2025-26670 CVE-2025-27480 CVE-2025-27482 CVE-2025-27491 CVE-2023-40547 CVE-2025-26664  +12 more Affected components: Windows Server 2016 Windows Server 2016 (Server Core installation) Microsoft summary: Use after […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Windows Server 2019 📖 ~4 min read  •  Source: Microsoft KB5074204 • MSRC update-guide entry Related CVEs: CVE-2025-54100 Affected components: Windows Server 2019 (Server Core installation) Microsoft summary: Improper neutralization of special elements used in a command ('command injection') in Windows PowerShell […]