Windows Server 2025 (Server Core installation) vulnerabilities

389 known vulnerabilities in Windows Server 2025 (Server Core installation) from Microsoft. 382 are rated high or critical, and 41 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50321Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50317Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Improper Neutralization of Special Elements used in a Command

  CVE-2026-58635Jul 14, 2026Microsoft

  Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-58608Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.

• 7.8 High severity

  Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Exploited

  CVE-2026-56155Jul 14, 2026Microsoft

  Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.

• 8.8 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-54999Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.

• 7.0 High severity

  Windows 11 Version 24H2: Out-of-bounds Read

  CVE-2026-54996Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Out-of-bounds Read

  CVE-2026-54991Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

• 8.8 High severity

  Windows 10 Version 1607: Integer Underflow (Wrap or Wraparound)

  CVE-2026-54982Jul 14, 2026Microsoft

  Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-54112Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Out-of-bounds Read

  CVE-2026-54111Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-54107Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-50697Jul 14, 2026Microsoft

  Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50384Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-50356Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-49808Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-49806Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-49803Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 Version 24H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-49802Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Improper Link Resolution Before File Access

  CVE-2026-49791Jul 14, 2026Microsoft

  Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Heap-based Buffer Overflow

  CVE-2026-49790Jul 14, 2026Microsoft

  Integer underflow (wrap or wraparound) in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-49784Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-49183Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 version 23H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-48572Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 11 version 23H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-44800Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 8.1 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-42900Jul 14, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network.

• 7.5 High severity

  Windows 10 Version 1607: Memory Allocation with Excessive Size Value

  CVE-2026-40378Jul 14, 2026MicrosoftEPSS 1.17%

  Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

• 8.1 High severity

  Windows 10 Version 1607: Use After Free

  CVE-2026-45635Jun 9, 2026Microsoft

  Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a network.

• 7.0 High severity

  Windows 10 Version 1607: Use After Free

  CVE-2026-45603Jun 9, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-45601Jun 9, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 11 Version 24H2: Access of Resource Using Incompatible Type

  CVE-2026-45600Jun 9, 2026Microsoft

  Access of resource using incompatible type ('type confusion') in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 1607: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-45598Jun 9, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 11 version 23H2: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-45597Jun 9, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in UI Automation Manager (uiamanager.dll) allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1607: Improper Link Resolution Before File Access

  CVE-2026-45586Jun 9, 2026MicrosoftEPSS 3.63%

  Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.

• 7.0 High severity

  Windows 10 Version 21H2: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2026-45487Jun 9, 2026Microsoft

  Time-of-check time-of-use (TOCTOU) race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-42991Jun 9, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-42979Jun 9, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-42978Jun 9, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 7.8 High severity

  Windows 10 Version 1809: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-42977Jun 9, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

• 7.5 High severity

  Remote Desktop client for Windows Desktop: Concurrent Execution using Shared Resource with Improper Synchronization

  CVE-2026-42913Jun 9, 2026Microsoft

  Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.