Patch tracker / Products / Windows Server 2025

Windows Server 2025: vulnerabilities and security updates

Every CVE affecting Windows Server 2025 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
202
Updates (KBs)
9
Actively exploited (KEV)
2
Critical Severity
16

CVEs affecting Windows Server 2025

CVESeverityCVSSEPSSStatus
CVE-2026-33824Critical9.873%KEV
CVE-2024-43451Medium6.584%KEV
CVE-2025-21268Critical9.881%-
CVE-2025-21269Critical9.881%-
CVE-2025-21329Critical9.881%-
CVE-2025-21328Critical9.881%-
CVE-2025-21189Critical9.881%-
CVE-2025-21332Critical9.881%-
CVE-2026-41089Critical9.880%-
CVE-2026-41096Critical9.880%-
CVE-2026-32209Critical9.880%-
CVE-2025-54518Critical9.880%-
CVE-2026-34329High8.880%-
CVE-2026-40403High8.880%-
CVE-2026-40415High8.180%-
CVE-2026-34332High8.080%-
CVE-2026-20928Critical9.873%-
CVE-2026-26175Critical9.873%-
CVE-2026-32220Critical9.873%-
CVE-2026-33829Critical9.873%-
CVE-2026-27906Critical9.873%-
CVE-2025-21276High7.581%-
CVE-2026-33834High7.880%-
CVE-2026-34330High7.880%-
CVE-2026-34333High7.880%-
CVE-2026-34343High7.880%-
CVE-2026-34344High7.880%-
CVE-2026-34351High7.880%-
CVE-2026-35415High7.880%-
CVE-2026-35417High7.880%-
CVE-2026-35418High7.880%-
CVE-2026-35420High7.880%-
CVE-2026-35421High7.880%-
CVE-2026-40377High7.880%-
CVE-2026-40399High7.880%-
CVE-2026-40407High7.880%-
CVE-2026-40408High7.880%-
CVE-2026-41088High7.880%-
CVE-2026-41095High7.880%-
CVE-2026-42896High7.880%-
CVE-2026-33835High7.880%-
CVE-2026-33837High7.880%-
CVE-2026-33838High7.880%-
CVE-2026-34334High7.880%-
CVE-2026-34336High7.880%-
CVE-2026-34337High7.880%-
CVE-2026-34338High7.880%-
CVE-2026-40369High7.880%-
CVE-2026-40382High7.880%-
CVE-2026-40397High7.880%-
CVE-2026-40398High7.880%-
CVE-2026-33841High7.880%-
CVE-2026-33840High7.880%-
CVE-2026-35424High7.580%-
CVE-2026-40405High7.580%-
CVE-2026-40406High7.580%-
CVE-2026-32161High7.580%-
CVE-2026-40414High7.480%-
CVE-2026-40413High7.480%-
CVE-2026-40401High7.180%-
CVE-2026-33839High7.080%-
CVE-2026-34331High7.080%-
CVE-2026-34342High7.080%-
CVE-2026-34345High7.080%-
CVE-2026-34347High7.080%-
CVE-2026-35416High7.080%-
CVE-2026-40410High7.080%-
CVE-2026-42825High7.080%-
CVE-2026-34340High7.080%-
CVE-2026-34341High7.080%-
CVE-2026-26167High8.873%-
CVE-2026-26178High8.873%-
CVE-2026-32157High8.873%-
CVE-2026-32225High8.873%-
CVE-2026-27928High8.773%-
CVE-2026-32170Medium6.780%-
CVE-2026-41097Medium6.780%-
CVE-2026-21530Medium6.780%-
CVE-2026-32091High8.473%-
CVE-2026-32162High8.473%-
CVE-2026-32221High8.473%-
CVE-2026-34350Medium6.580%-
CVE-2026-35422Medium6.580%-
CVE-2026-33827High8.173%-
CVE-2026-40380Medium6.280%-
CVE-2026-27912High8.073%-
CVE-2026-33826High8.073%-
CVE-2026-20930High7.873%-
CVE-2026-26153High7.873%-
CVE-2026-26156High7.873%-
CVE-2026-26159High7.873%-
CVE-2026-26160High7.873%-
CVE-2026-26161High7.873%-
CVE-2026-26162High7.873%-
CVE-2026-26163High7.873%-
CVE-2026-26168High7.873%-
CVE-2026-26170High7.873%-
CVE-2026-26172High7.873%-
CVE-2026-26176High7.873%-
CVE-2026-26179High7.873%-
CVE-2026-26180High7.873%-
CVE-2026-26181High7.873%-
CVE-2026-26183High7.873%-
CVE-2026-26184High7.873%-
CVE-2026-27907High7.873%-
CVE-2026-27909High7.873%-
CVE-2026-27910High7.873%-
CVE-2026-27911High7.873%-
CVE-2026-27914High7.873%-
CVE-2026-27915High7.873%-
CVE-2026-27916High7.873%-
CVE-2026-27918High7.873%-
CVE-2026-27919High7.873%-
CVE-2026-27920High7.873%-
CVE-2026-27923High7.873%-
CVE-2026-27927High7.873%-
CVE-2026-32069High7.873%-
CVE-2026-32074High7.873%-
CVE-2026-32076High7.873%-
CVE-2026-32077High7.873%-
CVE-2026-32078High7.873%-
CVE-2026-32089High7.873%-
CVE-2026-32090High7.873%-
CVE-2026-32152High7.873%-
CVE-2026-32154High7.873%-
CVE-2026-32155High7.873%-
CVE-2026-32158High7.873%-
CVE-2026-32159High7.873%-
CVE-2026-32160High7.873%-
CVE-2026-32163High7.873%-
CVE-2026-32164High7.873%-
CVE-2026-32165High7.873%-
CVE-2026-32183High7.873%-
CVE-2026-32222High7.873%-
CVE-2026-33098High7.873%-
CVE-2026-33101High7.873%-
CVE-2026-32153High7.873%-
CVE-2026-26154High7.573%-
CVE-2026-32071High7.573%-
CVE-2026-33096High7.573%-
CVE-2026-32156High7.473%-
CVE-2026-48566Medium5.580%-
CVE-2026-35419Medium5.580%-
CVE-2026-34339Medium5.580%-
CVE-2026-32149High7.373%-
CVE-2026-35423Medium5.480%-
CVE-2026-26151High7.173%-
CVE-2025-64720High7.173%-
CVE-2025-65018High7.173%-
CVE-2026-25184High7.073%-
CVE-2026-26152High7.073%-
CVE-2026-26165High7.073%-
CVE-2026-26166High7.073%-
CVE-2026-26173High7.073%-
CVE-2026-26174High7.073%-
CVE-2026-26177High7.073%-
CVE-2026-26182High7.073%-
CVE-2026-27908High7.073%-
CVE-2026-27917High7.073%-
CVE-2026-27921High7.073%-
CVE-2026-27922High7.073%-
CVE-2026-27926High7.073%-
CVE-2026-27929High7.073%-
CVE-2026-32068High7.073%-
CVE-2026-32070High7.073%-
CVE-2026-32073High7.073%-
CVE-2026-32075High7.073%-
CVE-2026-32080High7.073%-
CVE-2026-32082High7.073%-
CVE-2026-32083High7.073%-
CVE-2026-32086High7.073%-
CVE-2026-32087High7.073%-
CVE-2026-32093High7.073%-
CVE-2026-32150High7.073%-
CVE-2026-32219High7.073%-
CVE-2026-33100High7.073%-
CVE-2026-33104High7.073%-
CVE-2026-33099High7.073%-
CVE-2026-32223Medium6.873%-
CVE-2026-26155Medium6.573%-
CVE-2026-27925Medium6.573%-
CVE-2026-32151Medium6.573%-
CVE-2026-32072Medium6.273%-
CVE-2026-26169Medium6.173%-
CVE-2026-32088Medium6.173%-
CVE-2026-25250Medium6.073%-
CVE-2026-23670Medium5.773%-
CVE-2026-20806Medium5.573%-
CVE-2026-27930Medium5.573%-
CVE-2026-27931Medium5.573%-
CVE-2026-32079Medium5.573%-
CVE-2026-32081Medium5.573%-
CVE-2026-32084Medium5.573%-
CVE-2026-32085Medium5.573%-
CVE-2026-32181Medium5.573%-
CVE-2026-32212Medium5.573%-
CVE-2026-32214Medium5.573%-
CVE-2026-32215Medium5.573%-
CVE-2026-32217Medium5.573%-
CVE-2026-32218Medium5.573%-
CVE-2023-20585Medium5.373%-
CVE-2025-21247High8.859%-

Updates (KBs) for Windows Server 2025

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50820632026-04-14Critical9.873%124KEV
KB50837692026-04-14Critical9.873%121KEV
KB50466302024-11-12Medium6.584%1KEV
KB50874232026-06-09Critical9.880%66-
KB50875392026-06-09Critical9.880%66-
KB50894662026-06-09Critical9.84.7%61-
KB50895492026-06-09Critical9.84.7%61-
KB50499942025-01-14High7.54.6%7-
KB50535932025-03-11Medium4.33.2%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5099540: the full CVE list KB5099538: patch details KB5094123: the full CVE list KB5099539 install notes and severity CVE-2026-53412 exploit status KB5101650 download and what it fixes KB5120708 install notes and severity CVE-2026-55040 exploit status KB5101001: patch details KB5094128: the full CVE list
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.