Known vulnerabilities in Windows Server

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6516
Public exploits: 491
Known exploited (KEV): 269
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6516 known vulnerabilities: 95 critical, 1292 high, 1279 medium, 3848 low Critical High Medium Low

Vulnerabilities (6516)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141759 - Heap-based Buffer Overflow
CVE-2026-62719		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141758 - Heap-based Buffer Overflow
CVE-2026-62712		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141756 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62690		 CWE-362 Low
No
No
 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141754 - Heap-based Buffer Overflow
CVE-2026-62695		 CWE-122 Low
No
No
 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141753 - Use After Free
CVE-2026-61939		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141752 - Missing Authorization
CVE-2026-61936		 CWE-862 Low
No
No
 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141751 - Heap-based Buffer Overflow
CVE-2026-62692		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141750 - Cleartext Storage of Sensitive Information
CVE-2026-61928		 CWE-312 Low
No
No
 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141749 - Incorrect Authorization
CVE-2026-61925		 CWE-863 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141747 - Missing Authentication for Critical Function
CVE-2026-61367		 CWE-306 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141746 - Missing Authentication for Critical Function
CVE-2026-61356		 CWE-306 Low
No
No
 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141745 - Buffer over-read
CVE-2026-61350		 CWE-126 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141744 - Use After Free
CVE-2026-61348		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141743 - Heap-based Buffer Overflow
CVE-2026-59134		 CWE-122 Medium
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141742 - Weak Authentication
CVE-2026-59135		 CWE-1390 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141741 - Observable discrepancy
CVE-2026-59130		 CWE-203 Low
No
No
 2012 R2 6.3.9600.23337, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141740 - Integer overflow
CVE-2026-59127		 CWE-190 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141739 - Information Exposure Through Timing Discrepancy
CVE-2026-6727		 CWE-208 Low
No
No
 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141735 - Command injection
CVE-2026-49179		 CWE-77 High
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141732 - Heap-based Buffer Overflow
CVE-2026-50472		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226


Showing elements 1 - 20 out of 6516