Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 53

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 49
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 300 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117012 - Use After Free
CVE-2025-55689		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22824, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117011 - Use After Free
CVE-2025-55686		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22824, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117009 - Out-of-bounds read
CVE-2025-55681		 CWE-125 Low
No
No
 2012 R2 6.3.9600.22824, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101460
#VU117008 - Improper Access Control
CVE-2025-59230		 CWE-284 High
No
Exploited
 2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101459
#VU117007 - Untrusted Pointer Dereference
CVE-2025-24990		 CWE-822 High
Public exploit available
Exploited
 2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101458
#VU117006 - Heap-based Buffer Overflow
CVE-2025-59254		 CWE-122 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101457
#VU117005 - Heap-based Buffer Overflow
CVE-2025-58722		 CWE-122 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101457
#VU115962 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59220		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 19.09.2025 SB20250919142
#VU115961 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59216		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2025 10.0.26100.6508, 2025 10.0.26100.6584 19.09.2025 SB20250919141
#VU115959 - Use After Free
CVE-2025-59215		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22774, 2025 10.0.26100.6508, 2025 10.0.26100.6584 19.09.2025 SB20250919139
#VU115130 - Heap-based Buffer Overflow
CVE-2025-54894		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091017
#VU115129 - Integer overflow
CVE-2025-54110		 CWE-190 Low
Public exploit available
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091016
#VU115128 - Stack-based buffer overflow
CVE-2025-54099		 CWE-121 Low
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091015
#VU115127 - Exposure of sensitive information to an unauthorized actor
CVE-2025-53804		 CWE-200 Low
No
No
 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091014
#VU115113 - Improper Resolution of Path Equivalence
CVE-2025-54107		 CWE-41 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091008
#VU115112 - Protection Mechanism Failure
CVE-2025-54917		 CWE-693 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091008
#VU115111 - Out-of-bounds read
CVE-2025-53805		 CWE-125 Medium
No
No
 2012 R2 6.3.9600.22774, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091007
#VU115110 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-54913		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091006
#VU115109 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-49734		 CWE-923 Low
No
No
 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091005
#VU115108 - Integer overflow
CVE-2025-54895		 CWE-190 Low
No
No
 2008 R2 6.1.7601.27929, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091004


Showing elements 1041 - 1060 out of 1627