Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 67

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 49
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 300 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109115 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-29837		 CWE-59 Low
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB20250513112
#VU109108 - Improper Privilege Management
CVE-2025-27468		 CWE-269 Low
No
No
 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB20250513110
#VU109107 - Use After Free
CVE-2025-30385		 CWE-416 Low
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB20250513108
#VU109106 - Integer underflow
CVE-2025-29974		 CWE-191 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB20250513107
#VU109103 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-29842		 CWE-349 High
No
No
 2012 R2 6.3.9600.22577, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB20250513105
#VU109100 - Use After Free
CVE-2025-29970		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22577, 2022 23H2 10.0.25398.1611, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB20250513102
#VU109099 - Heap-based Buffer Overflow
CVE-2025-24063		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB20250513101
#VU109097 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-29969		 CWE-367 Medium
Public exploit available
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051399
#VU109094 - Improper input validation
CVE-2025-29955		 CWE-20 Low
No
No
 2012 R2 6.3.9600.22577, 2022 23H2 10.0.25398.1611, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051396
#VU109093 - NULL Pointer Dereference
CVE-2025-29838		 CWE-476 Low
No
No
 2012 R2 6.3.9600.22577, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051395
#VU109092 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-29841		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22577, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051394
#VU109078 - Heap-based Buffer Overflow
CVE-2025-30388		 CWE-122 High
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051390
#VU109077 - Out-of-bounds read
CVE-2025-29835		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27729, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051389
#VU109076 - Out-of-bounds read
CVE-2025-29839		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051387
#VU109073 - Heap-based Buffer Overflow
CVE-2025-29963		 CWE-122 High
No
No
 2012 R2 6.3.9600.22577, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051384
#VU109072 - Heap-based Buffer Overflow
CVE-2025-29962		 CWE-122 High
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051384
#VU109069 - Heap-based Buffer Overflow
CVE-2025-29964		 CWE-122 High
No
No
 2012 R2 6.3.9600.22577, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051384
#VU109068 - Use of Uninitialized Resource
CVE-2025-29958		 CWE-908 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382
#VU109067 - Out-of-bounds read
CVE-2025-29961		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382
#VU109062 - Use of Uninitialized Resource
CVE-2025-29830		 CWE-908 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382


Showing elements 1321 - 1340 out of 1627