Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 35

Vendor: Microsoft
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 1627
Public exploits: 54
Known exploited (KEV): 39

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 301 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126003 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-25184
CWE-362 Low
No
No
2012 R2 6.3.9600.23132, 2022 23H2 10.0.25398.2274, 2025 10.0.26100.32690 14.04.2026 SB20260414127
#VU126002 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20930
CWE-362 Low
No
No
2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 14.04.2026 SB20260414126
#VU123879 - Exposure of sensitive information to an unauthorized actor
CVE-2026-25185
CWE-200 Medium
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 11.03.2026 SB2026031122
#VU123878 - Out-of-bounds read
CVE-2026-25174
CWE-125 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 11.03.2026 SB2026031121
#VU123785 - NULL Pointer Dereference
CVE-2026-25165
CWE-476 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 11.03.2026 SB2026031101
#VU123784 - Deserialization of Untrusted Data
CVE-2026-25166
CWE-502 Medium
No
No
2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463 10.03.2026 SB20260310131
#VU123783 - Use After Free
CVE-2026-25167
CWE-416 Low
No
No
2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310130
#VU123782 - Use After Free
CVE-2026-25170
CWE-416 Low
No
No
2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310129
#VU123781 - Use After Free
CVE-2026-25171
CWE-416 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310128
#VU123778 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24297
CWE-362 Medium
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2025 10.0.26100.32463 10.03.2026 SB20260310126
#VU123777 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24296
CWE-362 Low
No
No
2012 R2 6.3.9600.23074, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310125
#VU123776 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24295
CWE-362 Low
No
No
2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310125
#VU123775 - Out-of-bounds read
CVE-2026-23672
CWE-125 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310124
#VU123774 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23671
CWE-362 Low
No
No
2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310123
#VU123773 - Use After Free
CVE-2026-23669
CWE-416 Medium
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310122
#VU123770 - Out-of-bounds read
CVE-2026-25175
CWE-125 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463 10.03.2026 SB20260310119
#VU123756 - Untrusted Search Path
CVE-2026-25190
CWE-426 High
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310111
#VU123755 - Use After Free
CVE-2026-25189
CWE-416 Low
No
No
2019 10.0.17763.8511, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463 10.03.2026 SB20260310110
#VU123751 - NULL Pointer Dereference
CVE-2026-24293
CWE-476 Low
No
No
2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310105
#VU123746 - Use After Free
CVE-2026-25178
CWE-416 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310105


Showing elements 681 - 700 out of 1627