Last updated on Nov 19, 2025
S.No Vulnerability Name Severity
Windows Graphics Component Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5026370)Critical
Windows CryptoAPI Denial of Service Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5027225)Critical
Windows Netlogon Information Disclosure Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5028171)Critical
Windows Kernel Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5029250)Critical
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5030216)Critical
Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5031364)Critical
Windows Scripting Engine Memory Corruption Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5032198)Critical
Windows Media Remote Code Execution Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5033118)Critical
Windows HTML Platforms Security Feature Bypass Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5034129)Critical
Windows Hyper-V Denial of Service Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5034770)Critical
Windows Hyper-V Remote Code Execution Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5035857)Critical
BitLocker Security Feature Bypass Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5036909)Critical
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5037782) (CVE-2024-30040) (CVE-2024-30040)Critical
MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU for Microsoft server operating system version 21H2 for x64-based Systems (KB5039227) (CVE-2023-50868)Critical
Windows Text Services Framework Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5040437)Critical
Windows Kernel Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5041160)Critical
Windows TCP/IP Remote Code Execution Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5042881) (CVE-2024-38217) (CVE-2024-38014)Critical
Open Source Curl Remote Code Execution Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5044281) (CVE-2024-43573) (CVE-2024-43572) (CVE-2024-6197) (CVE-2024-20659) (CVE-2024-43583)Critical
Windows Update Stack Elevation of Privilege Vulnerability in Windows Server 2022Important
Windows Package Library Manager Information Disclosure Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5046616)Critical
Windows Task Scheduler Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5048654) (CVE-2024-49138)Critical
Windows Digital Media Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5049983) (CVE-2025-21275) (CVE-2025-21308)Critical
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5051979) (CVE-2025-21391) (CVE-2025-21418) (CVE-2025-21377)Important
Windows Server Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5053603)Important
Windows Standards-Based Storage Management Service Denial of Service Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5055526) (CVE-2025-29824)Important
WinVerifyTrust Signature Validation Vulnerability(CVE-2013-3900) in Windows ServersImportant
Kernel Streaming Service Driver Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5058385)Important
Kernel Streaming Service Driver Elevation of Privilege Vulnerability for Microsoft server operating system version 23H2 for x64-based Systems (KB5058384)Important
Windows Storage Management Provider Information Disclosure Vulnerability for Microsoft server operating system version 23H2 for x64-based Systems (KB5060118) (CVE-2025-33053) (CVE-2025-33073)Important
Windows Storage Management Provider Information Disclosure Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5060526) (CVE-2025-33053) (CVE-2025-33073)Important
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue for Microsoft server operating system version 21H2 for x64-based Systems (KB5062572)Critical
AMD: CVE-2024-36350 Transient Scheduler Attack in Store Queue for Microsoft server operating system version 23H2 for x64-based Systems (KB5062570)Critical
Windows Graphics Component Elevation of Privilege Vulnerability for Microsoft server operating system version 23H2 for x64-based Systems (KB5063899)Critical
Windows Graphics Component Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5063880)Critical
Windows MBT Transport Driver Elevation of Privilege Vulnerability for Microsoft server operating system version 23H2 for x64-based Systems (KB5065425)Important
Windows MBT Transport Driver Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5065432) (CVE-2025-55234)Important
MITRE CVE-2016-9535: LibTIFF Heap Buffer Overflow Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5066782)Critical
MITRE CVE-2016-9535: LibTIFF Heap Buffer Overflow Vulnerability for Microsoft server operating system version 23H2 for x64-based Systems (KB5066780)Critical
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5070884)Critical
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability for Microsoft server operating system version 23H2 for x64-based Systems (KB5070879)Critical
Windows Smart Card Reader Elevation of Privilege Vulnerability for Microsoft server operating system version 23H2 for x64-based Systems (KB5068779)Critical
Windows Smart Card Reader Elevation of Privilege Vulnerability for Microsoft server operating system version 21H2 for x64-based Systems (KB5068787) (CVE-2025-62215)Critical

Disclaimer: This webpage is intended to provide you information about vulnerability announcement for certain specific software products. The information is provided "As Is" without warranty of any kind. The links provided point to pages on the vendors websites. You can get more information by clicking the links to visit the relevant pages on the vendors website.