CVE-2025-49716

HIGH

Windows Server 2008-2022 (incl. 23H2) <10.0.25398.1732 - DoS via Netlogon

Title source: llm

Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.

Core 1

Core References

Vendor Advisory vendor-advisory patch

CVSS v3 7.5

EPSS 0.3962

EPSS Percentile 97.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-400

Status published

Products (8)

microsoft/windows_server_2008 (2 CPE variants)

microsoft/windows_server_2008 r2 sp1

microsoft/windows_server_2012

microsoft/windows_server_2012 r2

microsoft/windows_server_2016 < 10.0.14393.8246

microsoft/windows_server_2019 < 10.0.17763.7558

microsoft/windows_server_2022 < 10.0.20348.3932

microsoft/windows_server_2022_23h2 < 10.0.25398.1732

Published Jul 08, 2025

Tracked Since Feb 18, 2026