Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 46

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 49
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 300 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118296 - Out-of-bounds read
CVE-2025-60706		 CWE-125 Low
No
No
 2008 R2 6.1.7601.28021, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111163
#VU118295 - Use After Free
CVE-2025-60717		 CWE-416 Low
No
No
 2008 R2 6.1.7601.28021, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111162
#VU118294 - Use After Free
CVE-2025-59515		 CWE-416 Low
No
No
 2008 R2 6.1.7601.28021, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111162
#VU118292 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-62217		 CWE-362 Low
No
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111159
#VU118291 - Untrusted Pointer Dereference
CVE-2025-60719		 CWE-822 Low
No
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111159
#VU118290 - Use After Free
CVE-2025-62213		 CWE-416 Low
No
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111159
#VU118287 - Information Exposure Through Log Files
CVE-2025-62209		 CWE-532 Low
No
No
 2008 R2 6.1.7601.28021, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 11.11.2025 SB2025111156
#VU118286 - Information Exposure Through Log Files
CVE-2025-62208		 CWE-532 Low
No
No
 2008 R2 6.1.7601.28021, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 11.11.2025 SB2025111156
#VU118284 - Improper Privilege Management
CVE-2025-59514		 CWE-269 Low
No
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111154
#VU118282 - Heap-based Buffer Overflow
CVE-2025-62452		 CWE-122 Medium
No
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111152
#VU118281 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-59510		 CWE-59 Low
No
No
 2012 R2 6.3.9600.22869, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111152
#VU118280 - Untrusted Pointer Dereference
CVE-2025-60713		 CWE-822 Low
No
No
 2008 R2 6.1.7601.28021, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111152
#VU118279 - Heap-based Buffer Overflow
CVE-2025-60715		 CWE-122 Medium
No
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111152
#VU118278 - Out-of-bounds read
CVE-2025-60720		 CWE-125 Low
No
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111151
#VU118277 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59506		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111150
#VU118276 - Use After Free
CVE-2025-60716		 CWE-416 Low
No
No
 2008 R2 6.1.7601.28021, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111150
#VU118275 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-60723		 CWE-362 Medium
No
No
 2008 R2 6.1.7601.28021, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111150
#VU118274 - Heap-based Buffer Overflow
CVE-2025-60724		 CWE-122 High
No
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111149
#VU117285 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-55696		 CWE-367 Low
No
No
 2012 R2 6.3.9600.22824, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB20251015133
#VU117278 - Cleartext Transmission of Sensitive Information
CVE-2025-53139		 CWE-319 Low
No
No
 2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 15.10.2025 SB20251015126


Showing elements 901 - 920 out of 1627