Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 69

Vendor: Microsoft
Software: Windows Server
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 1627
Public exploits: 49
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 300 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107282 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-27471		 CWE-591 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040950
#VU107281 - Improper input validation
CVE-2025-27737		 CWE-20 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040948
#VU107280 - Improper input validation
CVE-2025-29811		 CWE-20 Low
No
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2025 10.0.26100.3775 09.04.2025 SB2025040946
#VU107279 - Improper Access Control
CVE-2025-27738		 CWE-284 Medium
No
No
 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040943
#VU107278 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-26665		 CWE-591 Low
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040942
#VU107277 - Heap-based Buffer Overflow
CVE-2025-27487		 CWE-122 High
No
No
 2008 R2 6.1.7601.27670, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040941
#VU107276 - Insufficient Resource Pool
CVE-2025-27479		 CWE-410 High
No
No
 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040940
#VU107274 - Resource exhaustion
CVE-2025-27469		 CWE-400 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040938
#VU107273 - Use After Free
CVE-2025-26663		 CWE-416 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040938
#VU107272 - Resource exhaustion
CVE-2025-26673		 CWE-400 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040938
#VU107271 - Use After Free
CVE-2025-27729		 CWE-416 High
No
No
 2012 R2 6.3.9600.22523, 2025 10.0.26100.3775 09.04.2025 SB2025040937
#VU107267 - Out-of-bounds read
CVE-2025-27742		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040935
#VU107263 - Improper Access Control
CVE-2025-26678		 CWE-284 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040923
#VU107262 - Use After Free
CVE-2025-26687		 CWE-416 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040922
#VU107261 - Use After Free
CVE-2025-26681		 CWE-416 Low
Public exploit available
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040922
#VU107260 - Improper Access Control
CVE-2025-29810		 CWE-284 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040921
#VU107259 - Integer overflow
CVE-2025-26639		 CWE-190 Low
No
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040920
#VU107258 - Heap-based Buffer Overflow
CVE-2025-27478		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040919
#VU107257 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-21191		 CWE-367 Low
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040919
#VU107256 - Improper Access Control
CVE-2025-21197		 CWE-284 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040918


Showing elements 1361 - 1380 out of 1627