servercore:ltsc2025 contains CVEs CVE-2025-60724 and CVE-2025-49708

[slawekww]

Describe the bug
Microsoft Defender for Cloud found critical CVEs in servercore windows image:
mcr.microsoft.com/windows/servercore:ltsc2025
installed version: 10.0.26100.6584

CVEs:

• CVE-2025-60724
• CVE-2025-49708

To Reproduce
Store image in ACR and scan by MS Defender for Cloud

Expected behavior
No critical CVEs found.

Configuration:

• Windows2025

Additional context
Security compliance

[github-actions]

Thank you for creating an Issue. Please note that GitHub is not an official channel for Microsoft support requests. To create an official support request, please open a ticket here. Microsoft and the GitHub Community strive to provide a best effort in answering questions and supporting Issues on GitHub.