Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 60

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 54
Known exploited (KEV): 39

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 301 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112641 - Protection Mechanism Failure
CVE-2025-48003		 CWE-693 Low
No
No
 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112640 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-48001		 CWE-367 Low
No
No
 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112636 - Protection Mechanism Failure
CVE-2025-48800		 CWE-693 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112635 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-48818		 CWE-367 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112634 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-48804		 CWE-349 Low
Public exploit available
No
 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112633 - Missing Authorization
CVE-2025-49723		 CWE-862 Low
No
No
 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070988
#VU112632 - Use After Free
CVE-2025-48821		 CWE-416 Medium
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070981
#VU112631 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-48819		 CWE-591 Medium
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070981
#VU112602 - Resource exhaustion
CVE-2025-49722		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070953
#VU112601 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-48820		 CWE-59 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070952
#VU112599 - Improper input validation
CVE-2025-47982		 CWE-20 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070951
#VU112596 - Exposure of sensitive information to an unauthorized actor
CVE-2025-48823		 CWE-200 Medium
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070947
#VU112595 - Use After Free
CVE-2025-49675		 CWE-416 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070946
#VU112592 - Missing Support for Integrity Check
CVE-2025-48811		 CWE-353 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070945
#VU112591 - Protection Mechanism Failure
CVE-2025-47159		 CWE-693 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070945
#VU112590 - Missing Support for Integrity Check
CVE-2025-48803		 CWE-353 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070945
#VU112589 - Use After Free
CVE-2025-49682		 CWE-416 Low
No
No
 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070931
#VU112588 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-48799		 CWE-59 Low
Public exploit available
No
 2022 23H2 10.0.22621.5472, 2025 10.0.26100.4652 09.07.2025 SB2025070929
#VU112587 - Heap-based Buffer Overflow
CVE-2025-49691		 CWE-122 High
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070926
#VU112584 - Processor optimization removal or modification of security-critical code
CVE-2025-48810		 CWE-1037 Low
No
No
 2022 23H2 10.0.22621.5472, 2025 10.0.26100.4652 09.07.2025 SB2025070924


Showing elements 1181 - 1200 out of 1627