Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 34

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 49
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 300 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126035 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-27921		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414147
#VU126034 - Use After Free
CVE-2026-27908		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414147
#VU126033 - Use After Free
CVE-2026-27917		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23132, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414146
#VU126032 - Untrusted Pointer Dereference
CVE-2026-32077		 CWE-822 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414145
#VU126031 - Use After Free
CVE-2026-27925		 CWE-416 Medium
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414145
#VU126030 - Untrusted Pointer Dereference
CVE-2026-27920		 CWE-822 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414145
#VU126029 - Use After Free
CVE-2026-27916		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414145
#VU126028 - Use After Free
CVE-2026-32156		 CWE-416 High
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414145
#VU126027 - Use After Free
CVE-2026-32075		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414145
#VU126025 - Untrusted Pointer Dereference
CVE-2026-27919		 CWE-822 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414145
#VU126024 - Use After Free
CVE-2026-27915		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414145
#VU126023 - Out-of-bounds read
CVE-2026-32076		 CWE-125 Low
No
No
 2012 R2 6.3.9600.23132, 2022 23H2 10.0.25398.2274, 2025 10.0.26100.32690 14.04.2026 SB20260414143
#VU126022 - Integer underflow
CVE-2026-27907		 CWE-191 Low
No
No
 2012 R2 6.3.9600.23132, 2022 23H2 10.0.25398.2274, 2025 10.0.26100.32690 14.04.2026 SB20260414143
#VU126021 - Improper input validation
CVE-2026-27928		 CWE-20 High
No
No
 2012 R2 6.3.9600.23132, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414142
#VU126019 - Improper Access Control
CVE-2026-26183		 CWE-284 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414141
#VU126018 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-32091		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23132, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414140
#VU126017 - Double Free
CVE-2026-32219		 CWE-415 Low
No
No
 2012 R2 6.3.9600.23132, 2025 10.0.26100.32690 14.04.2026 SB20260414140
#VU126016 - Use After Free
CVE-2026-26181		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23132, 2022 23H2 10.0.25398.2274, 2025 10.0.26100.32690 14.04.2026 SB20260414140
#VU126010 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-26174		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414144
#VU126008 - Improper input validation
CVE-2026-26154		 CWE-20 Medium
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414144


Showing elements 661 - 680 out of 1627