CVE-2025-49716— Windows Netlogon Denial of Service Vulnerability
Quick assessment
Affected
Microsoft Windows Server 2008 R2 Service Pack 1
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Windows Netlogon是美国微软（Microsoft）公司的Windows的一个重要组件，主要功能是用户和机器在域内网络上的认证，以及复制数据库以进行域控备份，同时还用于维护域成员与域之间、域与域控之间、域DC与跨域DC之间的关系。 Microsoft Windows Netlogon存在资源管理错误漏洞。攻击者利用该漏洞导致系统拒绝服务。以下产品和版本受到影响：Windows Server 2019,Windows Server 2019 (Server Core inst
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-49716
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Windows Netlogon Denial of Service Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Windows Netlogon 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Windows Netlogon是美国微软（Microsoft）公司的Windows的一个重要组件，主要功能是用户和机器在域内网络上的认证，以及复制数据库以进行域控备份，同时还用于维护域成员与域之间、域与域控之间、域DC与跨域DC之间的关系。 Microsoft Windows Netlogon存在资源管理错误漏洞。攻击者利用该漏洞导致系统拒绝服务。以下产品和版本受到影响：Windows Server 2019,Windows Server 2019 (Server Core inst
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-49716
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-49716
请登录查看更多情报信息。
Same Patch Batch · Microsoft · 2025-07-08 · 129 CVEs total
| CVE-2025-47981 | 9.8 CRITICAL | SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerabilit |
| CVE-2025-48817 | 8.8 HIGH | Remote Desktop Client Remote Code Execution Vulnerability |
| CVE-2025-49723 | 8.8 HIGH | Windows StateRepository API Server file Tampering Vulnerability |
| CVE-2025-49701 | 8.8 HIGH | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2025-49688 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-49687 | 8.8 HIGH | Windows Input Method Editor (IME) Elevation of Privilege Vulnerability |
| CVE-2025-49704 | 8.8 HIGH | Microsoft SharePoint Remote Code Execution Vulnerability |
| CVE-2025-49673 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-49676 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-49674 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-49672 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-49669 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-48824 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-49657 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-49739 | 8.8 HIGH | Visual Studio Elevation of Privilege Vulnerability |
| CVE-2025-49740 | 8.8 HIGH | Windows SmartScreen Security Feature Bypass Vulnerability |
| CVE-2025-47998 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-49663 | 8.8 HIGH | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
| CVE-2025-47986 | 8.8 HIGH | Universal Print Management Service Elevation of Privilege Vulnerability |
| CVE-2025-49724 | 8.8 HIGH | Windows Connected Devices Platform Service Remote Code Execution Vulnerability |
Showing top 20 of 129 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Windows Server 2008 R2 Service Pack 1
-
CVE-2026-20833
Windows Kerberos Information Disclosure Vulnerability -
CVE-2026-0386
Windows Deployment Services Remote Code Execution Vulnerabil -
CVE-2025-54113
Windows Routing and Remote Access Service (RRAS) Remote Code -
CVE-2025-53806
Windows Routing and Remote Access Service (RRAS) Information -
CVE-2025-53796
Windows Routing and Remote Access Service (RRAS) Information
Same vendor: Microsoft
-
CVE-2026-62316
Microsoft UFO: DNS Rebinding → Unauthenticated File Read / C -
CVE-2026-69502
Azure SQL Database Elevation of Privilege Vulnerability -
CVE-2026-69855
Microsoft Copilot in Azure Information Disclosure Vulnerabil -
CVE-2026-69543
Azure Virtual Machines Elevation of Privilege Vulnerability -
CVE-2026-69558
Microsoft Partner Center Information Disclosure Vulnerabilit
Same weakness: CWE-400
-
CVE-2026-55531
PraisonAI: Unauthenticated unbounded session accumulation in -
CVE-2026-79658
Ech0 before 5.0.1 Denial of Service via Accept-Language -
CVE-2026-78684
vLLM before 0.27.0 Denial of Service via DeepStream Backend -
CVE-2026-12600
Uncontrolled memory usage in Innodata Labs’ Poppler JPX deco -
CVE-2026-77384
libp2p: Circuit relay v2 server reservation refresh leaks ab
V. Comments for CVE-2025-49716
No comments yet