Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 28

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 54
Known exploited (KEV): 39

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 301 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131254 - Out-of-bounds read
CVE-2026-35423		 CWE-125 Medium
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512115
#VU131244 - Heap-based Buffer Overflow
CVE-2026-35421		 CWE-122 High
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512111
#VU131243 - Out-of-bounds read
CVE-2026-34336		 CWE-125 Low
No
No
 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512110
#VU131241 - Integer overflow
CVE-2026-42896		 CWE-190 Low
No
No
 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512110
#VU131239 - Out-of-bounds read
CVE-2026-35419		 CWE-125 Low
No
No
 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512110
#VU131237 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-35422		 CWE-288 Medium
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512108
#VU131224 - NULL Pointer Dereference
CVE-2026-34350		 CWE-476 Medium
No
No
 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512107
#VU131219 - Heap-based Buffer Overflow
CVE-2026-34343		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512105
#VU131217 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-34342		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512103
#VU131216 - Type confusion
CVE-2026-35417		 CWE-843 Low
No
No
 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512102
#VU131215 - Use After Free
CVE-2026-34347		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512102
#VU131214 - Use After Free
CVE-2026-34333		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512102
#VU131213 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-34331		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512101
#VU131212 - Integer overflow
CVE-2026-34330		 CWE-190 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512101
#VU131211 - Use After Free
CVE-2026-33840		 CWE-416 Low
No
No
 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512101
#VU131210 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-33839		 CWE-362 Low
No
No
 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512101
#VU131209 - Improper Access Control
CVE-2026-33834		 CWE-284 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512100
#VU131208 - Double Free
CVE-2026-32170		 CWE-415 Medium
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB2026051299
#VU131207 - Double Free
CVE-2026-21530		 CWE-415 Medium
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5139, 2025 10.0.26100.32860 12.05.2026 SB2026051299
#VU126306 - Missing Required Cryptographic Step
CVE-2026-25250		 CWE-325 Low
Public exploit available
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 16.04.2026 SB2026041622


Showing elements 541 - 560 out of 1627