Synced 29 Jul 2026 01:07 UTC Account
← All products

Windows Server 2025 ↗

Microsoft · Operating System
↻ RSS feed
Monitors Windows Server 2025 and tailors your dashboard to that exact version.
10.0.26100 · latest cycle0/100 Critical · exploited

Summary iPlain-English security verdict for Windows Server 2025, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

Windows Server 2025 currently scores 0/100 — critical, with active exploitation. 1 of its known vulnerability is being actively exploited in the wild (CISA KEV), including CVE-2026-56155. The latest supported release is 10.0.26100. Upgrade immediately and review your exposure to the actively-exploited CVEs below. Note: this product is assessed at the product level on recent (365-day) activity rather than an exact per-version match, so it is never marked a confident "healthy".

Disclosure trend iNew CVEs published for Windows Server 2025 each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

'19
'20
'21
'22
'23
'24
'25
'26

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

CVE-2026-56155 HIGH exploited CWE-1220 EPSS 0% → fixed in 10.0.26100.33158 CVE-2026-33824 CRITICAL Double free EPSS 56% → fixed in 10.0.26100.32690 CVE-2026-49160 HIGH Uncontrolled resource consumption EPSS 48% → fixed in 10.0.26100.32995 CVE-2026-47291 CRITICAL CWE-122 EPSS 22% → fixed in 10.0.26100.32995 CVE-2026-45657 CRITICAL CWE-122 EPSS 15% → fixed in 10.0.26100.32995 CVE-2026-50518 CRITICAL CWE-122 EPSS 7% → fixed in 10.0.26100.33158 CVE-2026-49798 CRITICAL Use-after-free EPSS 2% → fixed in 10.0.26100.33158 CVE-2026-44815 CRITICAL CWE-121 EPSS 1% → fixed in 10.0.26100.32995 CVE-2026-56188 CRITICAL CWE-362 EPSS 1% → fixed in 10.0.26100.33158 CVE-2026-57092 CRITICAL Use-after-free EPSS 1% → fixed in 10.0.26100.33158 CVE-2026-56190 CRITICAL CWE-908 EPSS 1% → fixed in 10.0.26100.33158 CVE-2026-50447 CRITICAL CWE-122 EPSS 1% → fixed in 10.0.26100.33158

See all 522 known Windows Server 2025 CVEs & security history →

Get alerted about Windows Server 2025

Be emailed the moment Windows Server 2025 gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.

We email only on real events for Windows Server 2025 — no marketing, no sharing, and we never know what you run. Track your whole stack →

★ Monitor up to 200 products — freeHit ☆ Monitor on anything you run, then sign in (no password) to sync your stack across devices and unlock smart insights, risk history & CSV/JSON exports. Sign in free →

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each Windows Server 2025 release line is supported — and when it sunsets.

Nov14'34 Windows Server 2025 2025EOL 2034-11-14
Oct14'31 Windows Server 2025 2022EOL 2031-10-14
Jan9'29 Windows Server 2025 2019EOL 2029-01-09
Jan12'27 Windows Server 2025 2016EOL 2027-01-12
Oct24'25 Windows Server 2025 23h2-acended 2025-10-24
Oct10'23 Windows Server 2025 2012-r2ended 2023-10-10
Oct10'23 Windows Server 2025 2012ended 2023-10-10
Aug9'22 Windows Server 2025 20h2-sacended 2022-08-09
Dec14'21 Windows Server 2025 2004-sacended 2021-12-14
May11'21 Windows Server 2025 1909-sacended 2021-05-11
Dec8'20 Windows Server 2025 1903-sacended 2020-12-08
Nov10'20 Windows Server 2025 1809-sacended 2020-11-10

Full Windows Server 2025 end-of-life dates & support timeline →

2025 latest 10.0.26100 Supported until 2034-11-14
23h2-ac latest 10.0.25398 End of life ended 2025-10-24
2022 latest 10.0.20348 Supported until 2031-10-14
20h2-sac latest 10.0.19042 End of life ended 2022-08-09
2004-sac latest 10.0.19041 End of life ended 2021-12-14
1909-sac latest 10.0.18363 End of life ended 2021-05-11
1903-sac latest 10.0.18362 End of life ended 2020-12-08
1809-sac latest 10.0.17763 End of life ended 2020-11-10
2019 latest 10.0.17763 Supported until 2029-01-09
1803-sac latest 10.0.17134 End of life ended 2019-11-12
See all upcoming end-of-life dates →

Frequently asked

Is Windows Server 2025 safe and patched?

Windows Server 2025 currently scores 0/100 — critical, with active exploitation. 1 of its known vulnerability is being actively exploited in the wild (CISA KEV), including CVE-2026-56155. The latest supported release is 10.0.26100. Upgrade immediately and review your exposure to the actively-exploited CVEs below. Note: this product is assessed at the product level on recent (365-day) activity rather than an exact per-version match, so it is never marked a confident "healthy".

What should I do about Windows Server 2025 now?

Upgrade Windows Server 2025 to the latest supported release (10.0.26100) or later, which clears the actively-exploited issues affecting older versions, then confirm against Microsoft's official advisory.

When does Windows Server 2025 reach end-of-life?

The latest supported Windows Server 2025 release is 10.0.26100. After end-of-life a release no longer receives security patches.

Which versions of Windows Server 2025 are still receiving security updates?

Supported Windows Server 2025 release lines (latest 10.0.26100): 2025, 2022, 2019, 2016. End-of-life releases no longer receive security patches.

product-level posture (last 365d); exact per-version verdict pending precise version mapping

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Microsoft's official advisory before you patch or upgrade — Windows Server 2025 official site ↗