Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 47

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 54
Known exploited (KEV): 39

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 301 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117223 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59200		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101582
#VU117222 - Deserialization of Untrusted Data
CVE-2025-59287		 CWE-502 Critical
Public exploit available
Exploited
 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101581
#VU117221 - Improper Authentication
CVE-2025-55340		 CWE-287 Low
No
No
 2012 R2 6.3.9600.22824, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101580
#VU117218 - Use After Free
CVE-2025-59210		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 15.10.2025 SB2025101577
#VU117212 - Information Exposure Through Log Files
CVE-2025-59203		 CWE-532 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101571
#VU117206 - Information Exposure Through Log Files
CVE-2025-59197		 CWE-532 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101564
#VU117204 - Resource exhaustion
CVE-2025-59502		 CWE-400 Medium
No
No
 2012 R2 6.3.9600.22824, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 15.10.2025 SB2025101562
#VU117203 - Heap-based Buffer Overflow
CVE-2025-59295		 CWE-122 High
No
No
 2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101561
#VU117202 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59294		 CWE-200 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101560
#VU117199 - Improper Authentication
CVE-2025-59280		 CWE-287 Low
No
No
 2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101557
#VU117198 - Heap-based Buffer Overflow
CVE-2025-59255		 CWE-122 Low
No
No
 2012 R2 6.3.9600.22824, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101555
#VU117196 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59211		 CWE-200 Low
No
No
 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101548
#VU117195 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59209		 CWE-200 Low
No
No
 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101548
#VU117194 - Improper Access Control
CVE-2025-59201		 CWE-284 Low
No
No
 2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101547
#VU117193 - Use After Free
CVE-2025-50174		 CWE-416 Low
No
No
 2022 23H2 10.0.25398.1913, 2025 10.0.26100.6899 15.10.2025 SB2025101546
#VU117192 - Untrusted Pointer Dereference
CVE-2025-55677		 CWE-822 Low
No
No
 2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 15.10.2025 SB2025101546
#VU117191 - Use After Free
CVE-2025-58737		 CWE-416 High
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101545
#VU117190 - Heap-based Buffer Overflow
CVE-2025-58725		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101544
#VU117189 - Out-of-bounds read
CVE-2025-59208		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101543
#VU117188 - Stack-based buffer overflow
CVE-2025-24052		 CWE-121 Low
Public exploit available
No
 2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101541


Showing elements 921 - 940 out of 1627