Patch tracker / Products / Windows Server 2025

Windows Server 2025: vulnerabilities and security updates

Every CVE affecting Windows Server 2025 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
75
Updates (KBs)
7
Actively exploited (KEV)
1
Critical Severity
74

CVEs affecting Windows Server 2025

CVESeverityCVSSEPSSStatus
CVE-2024-43451Critical9.882%KEV
CVE-2025-21268Critical9.881%-
CVE-2025-21269Critical9.881%-
CVE-2025-21329Critical9.881%-
CVE-2025-21328Critical9.881%-
CVE-2025-21189Critical9.881%-
CVE-2025-21276Critical9.881%-
CVE-2025-21332Critical9.881%-
CVE-2026-48566Critical9.880%-
CVE-2026-33834Critical9.880%-
CVE-2026-33839Critical9.880%-
CVE-2026-34329Critical9.880%-
CVE-2026-34330Critical9.880%-
CVE-2026-34331Critical9.880%-
CVE-2026-34333Critical9.880%-
CVE-2026-34342Critical9.880%-
CVE-2026-34343Critical9.880%-
CVE-2026-34344Critical9.880%-
CVE-2026-34345Critical9.880%-
CVE-2026-34347Critical9.880%-
CVE-2026-34350Critical9.880%-
CVE-2026-34351Critical9.880%-
CVE-2026-35415Critical9.880%-
CVE-2026-35416Critical9.880%-
CVE-2026-35417Critical9.880%-
CVE-2026-35418Critical9.880%-
CVE-2026-35419Critical9.880%-
CVE-2026-35420Critical9.880%-
CVE-2026-35421Critical9.880%-
CVE-2026-35422Critical9.880%-
CVE-2026-35423Critical9.880%-
CVE-2026-35424Critical9.880%-
CVE-2026-40377Critical9.880%-
CVE-2026-40380Critical9.880%-
CVE-2026-40399Critical9.880%-
CVE-2026-40405Critical9.880%-
CVE-2026-40406Critical9.880%-
CVE-2026-40407Critical9.880%-
CVE-2026-40408Critical9.880%-
CVE-2026-40410Critical9.880%-
CVE-2026-40414Critical9.880%-
CVE-2026-40415Critical9.880%-
CVE-2026-41088Critical9.880%-
CVE-2026-41089Critical9.880%-
CVE-2026-41095Critical9.880%-
CVE-2026-41096Critical9.880%-
CVE-2026-32161Critical9.880%-
CVE-2026-32170Critical9.880%-
CVE-2026-42825Critical9.880%-
CVE-2026-42896Critical9.880%-
CVE-2026-33835Critical9.880%-
CVE-2026-33837Critical9.880%-
CVE-2026-33838Critical9.880%-
CVE-2026-34332Critical9.880%-
CVE-2026-34334Critical9.880%-
CVE-2026-34336Critical9.880%-
CVE-2026-34337Critical9.880%-
CVE-2026-34338Critical9.880%-
CVE-2026-34339Critical9.880%-
CVE-2026-34340Critical9.880%-
CVE-2026-34341Critical9.880%-
CVE-2026-40369Critical9.880%-
CVE-2026-40382Critical9.880%-
CVE-2026-40397Critical9.880%-
CVE-2026-32209Critical9.880%-
CVE-2026-40398Critical9.880%-
CVE-2026-40401Critical9.880%-
CVE-2026-40403Critical9.880%-
CVE-2026-40413Critical9.880%-
CVE-2026-41097Critical9.880%-
CVE-2025-54518Critical9.880%-
CVE-2026-21530Critical9.880%-
CVE-2026-33841Critical9.880%-
CVE-2026-33840Critical9.880%-
CVE-2025-21247High8.859%-

Updates (KBs) for Windows Server 2025

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50466302024-11-12Medium6.582%1KEV
KB50874232026-06-09Critical9.880%66-
KB50875392026-06-09Critical9.880%66-
KB50894662026-06-09Critical9.84.7%61-
KB50895492026-06-09Critical9.84.7%61-
KB50499942025-01-14High7.54.6%7-
KB50535932025-03-11Medium4.33.2%1-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.