Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 40

Vendor: Microsoft

Software: Windows Server

Version: 2025 10.0.26100.2605

Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*

Website: https://www.microsoft.com

Total vulnerabilities: 1627

Public exploits: 49

Known exploited (KEV): 38

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (1627)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU121387 - Improper input validation CVE-2026-20856	CWE-20	High	No	No	2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	14.01.2026	SB2026011440
#VU121369 - Incorrect Privilege Assignment CVE-2026-20852	CWE-266	Low	No	No	2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	14.01.2026	SB2026011422
#VU121368 - Incorrect Privilege Assignment CVE-2026-20804	CWE-266	Low	No	No	2008 R2 6.1.7601.28117, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.32230	14.01.2026	SB2026011422
#VU121363 - Exposure of sensitive information to an unauthorized actor CVE-2026-20847	CWE-200	Medium	No	No	2008 R2 6.1.7601.28117, 2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	14.01.2026	SB2026011417
#VU121357 - Use After Free CVE-2026-20844	CWE-416	Low	No	No	2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	14.01.2026	SB2026011411
#VU121350 - Use After Free CVE-2026-20842	CWE-416	Low	No	No	2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	14.01.2026	SB2026011403
#VU121348 - Reliance on Component That is Not Updateable CVE-2026-21265	CWE-1329	Low	No	No	2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.32230	14.01.2026	SB2026011401
#VU121345 - Heap-based Buffer Overflow CVE-2026-20922	CWE-122	Medium	No	No	2008 R2 6.1.7601.28117, 2008 6.0.6003.23717, 2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113132
#VU121344 - Heap-based Buffer Overflow CVE-2026-20840	CWE-122	Medium	No	No	2008 R2 6.1.7601.28117, 2008 6.0.6003.23717, 2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113132
#VU121333 - Protection Mechanism Failure CVE-2026-20824	CWE-693	Medium	No	No	2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113131
#VU121332 - Out-of-bounds read CVE-2026-20828	CWE-125	Low	No	No	2008 R2 6.1.7601.28117, 2008 6.0.6003.23717, 2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113130
#VU121331 - Out-of-bounds read CVE-2026-20829	CWE-125	Low	No	No	2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113129
#VU121330 - Heap-based Buffer Overflow CVE-2026-20837	CWE-122	High	No	No	2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113128
#VU121329 - Improper Access Control CVE-2026-20839	CWE-284	Low	No	No	2008 R2 6.1.7601.28117, 2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113127
#VU121328 - Use After Free CVE-2026-20871	CWE-416	Low	No	No	2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113126
#VU121323 - Use of a Broken or Risky Cryptographic Algorithm CVE-2026-20833	CWE-327	Low	No	No	2008 R2 6.1.7601.28117, 2008 6.0.6003.23717, 2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113123 SB2026031840
#VU121322 - Reliance on Untrusted Inputs in a Security Decision CVE-2026-20849	CWE-807	Medium	No	No	2008 R2 6.1.7601.28117, 2008 6.0.6003.23717, 2012 R2 6.3.9600.22968, 2012 6.2.9200.25868, 2016 10.0.14393.8783, 2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113123
#VU121300 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-20873	CWE-362	Low	No	No	2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113122
#VU121299 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-20874	CWE-362	Low	No	No	2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113122
#VU121293 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-20866	CWE-362	Low	No	No	2019 10.0.17763.8276, 2022 23H2 10.0.25398.2092, 2022 10.0.20348.4648, 2025 10.0.26100.7623, 2025 10.0.26100.32230	13.01.2026	SB20260113122

Showing elements 781 - 800 out of 1627

Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 40

Vulnerabilities by Severity

Vulnerabilities (1627)

Please verify you're human