Patch tracker / Products / Windows Server 2025

Windows Server 2025: vulnerabilities and security updates

Every CVE affecting Windows Server 2025 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
2624
Updates (KBs)
40
Actively exploited (KEV)
40
Critical Severity
584

CVEs affecting Windows Server 2025

CVESeverityCVSSEPSSStatus
CVE-2024-49039High8.884%KEVRansomware
CVE-2025-26633High7.059%KEVRansomware
CVE-2025-29824High7.814%KEVRansomware
CVE-2025-60710High7.84.6%KEVRansomware
CVE-2025-59287Critical9.8100%KEV
CVE-2025-33053High8.887%KEV
CVE-2025-33073High8.887%KEV
CVE-2024-49138High7.884%KEV
CVE-2025-21333High7.881%KEV
CVE-2025-21334High7.881%KEV
CVE-2025-21335High7.881%KEV
CVE-2024-43451Medium6.584%KEV
CVE-2025-30400High7.864%KEV
CVE-2025-32701High7.864%KEV
CVE-2025-32706High7.864%KEV
CVE-2025-32709High7.864%KEV
CVE-2025-30397High7.564%KEV
CVE-2026-20805Medium5.571%KEV
CVE-2025-24985High7.859%KEV
CVE-2025-24993High7.859%KEV
CVE-2025-24054Medium6.559%KEV
CVE-2025-24991Medium5.559%KEV
CVE-2025-24984Medium4.659%KEV
CVE-2025-21418High7.840%KEV
CVE-2025-21391High7.140%KEV
CVE-2026-21513High8.824%KEV
CVE-2026-21510High8.824%KEV
CVE-2026-21519High7.824%KEV
CVE-2026-21533High7.824%KEV
CVE-2026-21525Medium6.224%KEV
CVE-2026-33824Critical9.82.0%KEV
CVE-2025-24990High7.86.4%KEV
CVE-2025-59230High7.86.4%KEV
CVE-2026-56155High7.84.9%KEV
CVE-2025-62221High7.84.6%KEV
CVE-2025-62215High7.06.0%KEV
CVE-2026-81963High7.82.8%KEV
CVE-2026-68820High7.01.2%KEV
CVE-2025-47827Medium4.66.4%KEV
CVE-2026-32202Medium4.34.9%KEV
CVE-2024-38264Critical9.884%-
CVE-2024-43633Critical9.884%-
CVE-2024-43639Critical9.884%-
CVE-2024-38203Critical9.884%-
CVE-2024-43646Critical9.884%-
CVE-2024-43631Critical9.884%-
CVE-2024-49087Critical9.884%-
CVE-2024-49094Critical9.884%-
CVE-2024-49098Critical9.884%-
CVE-2024-49099Critical9.884%-
CVE-2024-49101Critical9.884%-
CVE-2024-49103Critical9.884%-
CVE-2024-49111Critical9.884%-
CVE-2024-49081Critical9.884%-
CVE-2024-49112Critical9.884%-
CVE-2024-49109Critical9.884%-
CVE-2025-32715High8.887%-
CVE-2025-32719High8.887%-
CVE-2025-32720High8.887%-
CVE-2025-32722High8.887%-
CVE-2025-33058High8.887%-
CVE-2025-33059High8.887%-
CVE-2025-33060High8.887%-
CVE-2025-33061High8.887%-
CVE-2025-33062High8.887%-
CVE-2025-33063High8.887%-
CVE-2025-33064High8.887%-
CVE-2025-33065High8.887%-
CVE-2025-33066High8.887%-
CVE-2025-47160High8.887%-
CVE-2025-24068High8.887%-
CVE-2025-24069High8.887%-
CVE-2025-24065High8.887%-
CVE-2025-33052High8.887%-
CVE-2025-33055High8.887%-
CVE-2025-33057High8.887%-
CVE-2025-33069High8.887%-
CVE-2025-3052High8.887%-
CVE-2025-33067High8.487%-
CVE-2024-7344Critical9.881%-
CVE-2025-21189Critical9.881%-
CVE-2025-21193Critical9.881%-
CVE-2025-21202Critical9.881%-
CVE-2025-21210Critical9.881%-
CVE-2025-21213Critical9.881%-
CVE-2025-21214Critical9.881%-
CVE-2025-21215Critical9.881%-
CVE-2025-21217Critical9.881%-
CVE-2025-21219Critical9.881%-
CVE-2025-21225Critical9.881%-
CVE-2025-21226Critical9.881%-
CVE-2025-21227Critical9.881%-
CVE-2025-21228Critical9.881%-
CVE-2025-21229Critical9.881%-
CVE-2025-21232Critical9.881%-
CVE-2025-21242Critical9.881%-
CVE-2025-21249Critical9.881%-
CVE-2025-21255Critical9.881%-
CVE-2025-21256Critical9.881%-
CVE-2025-21257Critical9.881%-
CVE-2025-21258Critical9.881%-
CVE-2025-21260Critical9.881%-
CVE-2025-21261Critical9.881%-
CVE-2025-21263Critical9.881%-
CVE-2025-21265Critical9.881%-
CVE-2025-21268Critical9.881%-
CVE-2025-21269Critical9.881%-
CVE-2025-21272Critical9.881%-
CVE-2025-21274Critical9.881%-
CVE-2025-21278Critical9.881%-
CVE-2025-21280Critical9.881%-
CVE-2025-21284Critical9.881%-
CVE-2025-21288Critical9.881%-
CVE-2025-21298Critical9.881%-
CVE-2025-21301Critical9.881%-
CVE-2025-21307Critical9.881%-
CVE-2025-21308Critical9.881%-
CVE-2025-21310Critical9.881%-
CVE-2025-21311Critical9.881%-
CVE-2025-21313Critical9.881%-
CVE-2025-21314Critical9.881%-
CVE-2025-21316Critical9.881%-
CVE-2025-21317Critical9.881%-
CVE-2025-21318Critical9.881%-
CVE-2025-21319Critical9.881%-
CVE-2025-21320Critical9.881%-
CVE-2025-21321Critical9.881%-
CVE-2025-21323Critical9.881%-
CVE-2025-21324Critical9.881%-
CVE-2025-21327Critical9.881%-
CVE-2025-21328Critical9.881%-
CVE-2025-21329Critical9.881%-
CVE-2025-21332Critical9.881%-
CVE-2025-21336Critical9.881%-
CVE-2025-21340Critical9.881%-
CVE-2025-21341Critical9.881%-
CVE-2025-21374Critical9.881%-
CVE-2025-29828High8.187%-
CVE-2025-33071High8.187%-
CVE-2025-33070High8.187%-
CVE-2025-49735High8.187%-
CVE-2024-43627High8.884%-
CVE-2024-43628High8.884%-
CVE-2024-43620High8.884%-
CVE-2024-43621High8.884%-
CVE-2024-43622High8.884%-
CVE-2024-43624High8.884%-
CVE-2024-43635High8.884%-
CVE-2024-49085High8.884%-
CVE-2024-49086High8.884%-
CVE-2024-49093High8.884%-
CVE-2024-49102High8.884%-
CVE-2024-49104High8.884%-
CVE-2024-49117High8.884%-
CVE-2024-49125High8.884%-
CVE-2024-49080High8.884%-
CVE-2025-32712High7.887%-
CVE-2025-32713High7.887%-
CVE-2025-32714High7.887%-
CVE-2025-32718High7.887%-
CVE-2025-33075High7.887%-
CVE-2025-32724High7.587%-
CVE-2025-32725High7.587%-
CVE-2025-33050High7.587%-
CVE-2025-33056High7.587%-
CVE-2025-33068High7.587%-
CVE-2024-49105High8.484%-
CVE-2024-43625High8.184%-
CVE-2025-32721High7.387%-
CVE-2024-49106High8.184%-
CVE-2024-49108High8.184%-
CVE-2024-49115High8.184%-
CVE-2024-49122High8.184%-
CVE-2024-49124High8.184%-
CVE-2024-49126High8.184%-
CVE-2024-49118High8.184%-
CVE-2024-49127High8.184%-
CVE-2024-49116High8.184%-
CVE-2024-49119High8.184%-
CVE-2024-49123High8.184%-
CVE-2024-49132High8.184%-
CVE-2024-49120High8.184%-
CVE-2025-21223High8.881%-
CVE-2025-21233High8.881%-
CVE-2025-21236High8.881%-
CVE-2025-21237High8.881%-
CVE-2025-21238High8.881%-
CVE-2025-21239High8.881%-
CVE-2025-21240High8.881%-
CVE-2025-21241High8.881%-
CVE-2025-21243High8.881%-
CVE-2025-21244High8.881%-
CVE-2025-21245High8.881%-
CVE-2025-21246High8.881%-
CVE-2025-21248High8.881%-
CVE-2025-21250High8.881%-
CVE-2025-21252High8.881%-
CVE-2025-21266High8.881%-
CVE-2025-21273High8.881%-
CVE-2025-21282High8.881%-
CVE-2025-21286High8.881%-
CVE-2025-21292High8.881%-
CVE-2025-21302High8.881%-
CVE-2025-21303High8.881%-
CVE-2025-21305High8.881%-
CVE-2025-21306High8.881%-
CVE-2025-21339High8.881%-
CVE-2025-21409High8.881%-
CVE-2025-21411High8.881%-
CVE-2025-21413High8.881%-
CVE-2025-21417High8.881%-
CVE-2025-21293High8.881%-
CVE-2024-43623High7.884%-
CVE-2024-43626High7.884%-
CVE-2024-43630High7.884%-
CVE-2024-43644High7.884%-
CVE-2024-49046High7.884%-
CVE-2024-43629High7.884%-
CVE-2024-43636High7.884%-
CVE-2024-43641High7.884%-
CVE-2024-49019High7.884%-
CVE-2024-49072High7.884%-
CVE-2024-49076High7.884%-
CVE-2024-49079High7.884%-
CVE-2024-49088High7.884%-
CVE-2024-49090High7.884%-
CVE-2024-49114High7.884%-
CVE-2024-43450High7.584%-
CVE-2024-43452High7.584%-
CVE-2024-43642High7.584%-
CVE-2024-49096High7.584%-
CVE-2024-49121High7.584%-
CVE-2024-49129High7.584%-
CVE-2024-49113High7.584%-
CVE-2024-49075High7.584%-
CVE-2025-21224High8.181%-
CVE-2025-21294High8.181%-
CVE-2025-21295High8.181%-
CVE-2025-21297High8.181%-
CVE-2025-21309High8.181%-
CVE-2024-49107High7.384%-
CVE-2024-49089High7.284%-
CVE-2024-49091High7.284%-
CVE-2025-21234High7.881%-
CVE-2025-21235High7.881%-
CVE-2025-21275High7.881%-
CVE-2025-21281High7.881%-
CVE-2025-21287High7.881%-
CVE-2025-21315High7.881%-
CVE-2025-21325High7.881%-

Showing the 250 highest-risk of 2624 CVEs. See all in the CVE reference.

Updates (KBs) for Windows Server 2025

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50466172024-11-12Critical9.884%33KEVRansomware
KB50466962024-11-12Critical9.884%33KEVRansomware
KB50535982025-03-11High8.859%36KEVRansomware
KB50536362025-03-11High8.859%36KEVRansomware
KB50555232025-04-08High8.814%82KEVRansomware
KB50720142025-12-09High8.84.6%33KEVRansomware
KB50720332025-12-09High8.84.6%34KEVRansomware
KB50708812025-10-14Critical9.8100%1KEV
KB50708932025-10-14Critical9.8100%1KEV
KB50486672024-12-10Critical9.884%56KEV
KB50487942024-12-10Critical9.884%57KEV
KB50608412025-06-10High8.887%39KEV
KB50608422025-07-08High8.887%40KEV
KB50500092025-01-14Critical9.881%128KEV
KB50733792026-01-13Critical9.871%86KEV
KB50584112025-08-12High8.864%44KEV
KB50519872025-03-11High8.840%38KEV
KB50521052025-02-11High8.840%37KEV
KB50584972025-06-10High8.830%42KEV
KB50758992026-02-10High8.824%29KEV
KB50759422026-02-10High8.824%29KEV
KB50668352025-12-09Critical9.96.4%134KEV
KB50688612025-12-09Critical9.86.0%35KEV
KB50689662025-12-09Critical9.86.0%35KEV
KB50995362026-07-14Critical9.94.9%389KEV
KB51228712026-09-08Critical9.82.8%679KEV
KB50820632026-04-14Critical9.82.0%124KEV
KB51202282026-08-11Critical9.81.2%215KEV
KB51202332026-08-11Critical9.81.2%215KEV
KB50638782025-08-12Critical9.848%61-
KB50640102025-08-12Critical9.848%61-
KB50625532025-08-12Critical9.833%102-
KB50654262025-10-14High8.820%64-
KB50654742025-10-14High8.820%64-
KB50941252026-06-09Critical9.82.3%109-
KB50874232026-06-09Critical9.82.2%66-
KB50875392026-06-09Critical9.82.2%66-
KB50787362026-03-10High8.84.7%39-
KB50787402026-03-10High8.84.7%39-
KB50742042025-12-09High7.82.2%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.