Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 65

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 49
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 300 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110752 - Use of Uninitialized Resource
CVE-2025-33070		 CWE-908 High
No
No
 2008 R2 6.1.7601.27769, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061093
#VU110750 - Use After Free
CVE-2025-32710		 CWE-416 High
Public exploit available
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2008 6.0.6003.23317, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 10.06.2025 SB2025061091
#VU110749 - Improper Verification of Cryptographic Signature
CVE-2025-33069		 CWE-347 Low
No
No
 2012 R2 6.3.9600.22620, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061090
#VU110748 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-32721		 CWE-59 Low
No
No
 2012 R2 6.3.9600.22620, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061089
#VU110747 - Protection Mechanism Failure
CVE-2025-47160		 CWE-693 Medium
No
No
 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061088
#VU110744 - Improper Privilege Management
CVE-2025-33067		 CWE-269 Low
No
No
 2012 R2 6.3.9600.22620, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061086
#VU110743 - Exposure of sensitive information to an unauthorized actor
CVE-2025-47969		 CWE-200 Low
No
No
 2012 R2 6.3.9600.22620, 2025 10.0.26100.3981, 2025 10.0.26100.4061 10.06.2025 SB2025061085
#VU110741 - Use After Free
CVE-2025-32712		 CWE-416 Low
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061083
#VU110739 - Use After Free
CVE-2025-33071		 CWE-416 High
No
No
 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061081
#VU110738 - Improper Access Control
CVE-2025-32714		 CWE-284 Low
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061080
#VU110737 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-33075		 CWE-59 Low
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061080
#VU110736 - Improper Access Control
CVE-2025-33073		 CWE-284 Medium
Public exploit available
Exploited
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061079
#VU110735 - Integer overflow
CVE-2025-32718		 CWE-190 Low
No
No
 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061079
#VU110733 - Heap-based Buffer Overflow
CVE-2025-33064		 CWE-122 Medium
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061077
#VU110732 - Heap-based Buffer Overflow
CVE-2025-33066		 CWE-122 High
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061077
#VU110731 - NULL Pointer Dereference
CVE-2025-33057		 CWE-476 Medium
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061076
#VU110730 - Improper Access Control
CVE-2025-33056		 CWE-284 High
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061076
#VU110728 - Resource exhaustion
CVE-2025-33068		 CWE-400 High
No
No
 2012 R2 6.3.9600.22620, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061074
#VU110727 - Resource exhaustion
CVE-2025-32724		 CWE-400 High
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061073
#VU110725 - Protection Mechanism Failure
CVE-2025-32725		 CWE-693 High
No
No
 2012 R2 6.3.9600.22620, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061072


Showing elements 1281 - 1300 out of 1627