Known vulnerabilities in Windows Server 2025 10.0.26100.2605 - page 72

Vendor: Microsoft
Version: 2025 10.0.26100.2605
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 1627
Public exploits: 49
Known exploited (KEV): 38
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2025 10.0.26100.2605 Windows Server 2025 10.0.26100.2605 is affected by 1627 vulnerabilities: 7 critical, 263 high, 300 medium, 1056 low Critical High Medium Low

Vulnerabilities (1627)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107183 - Improper input validation
CVE-2025-24074
CWE-20 Low
No
No
2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040861
#VU107182 - Improper input validation
CVE-2025-24073
CWE-20 Low
No
No
2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040861
#VU107181 - Improper input validation
CVE-2025-24062
CWE-20 Low
No
No
2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040861
#VU107180 - Improper input validation
CVE-2025-24060
CWE-20 Low
No
No
2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040861
#VU107179 - Use After Free
CVE-2025-26670
CWE-416 High
No
No
2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040860
#VU107178 - Heap-based Buffer Overflow
CVE-2025-27490
CWE-122 Low
No
No
2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040859
#VU107177 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-27482
CWE-591 High
No
No
2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040858
#VU107176 - Use After Free
CVE-2025-26671
CWE-416 High
No
No
2008 R2 6.1.7601.27670, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040858
#VU107175 - Use After Free
CVE-2025-27480
CWE-416 High
No
No
2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040858
#VU107174 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-27727
CWE-59 Low
No
No
2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040856
#VU107167 - Heap-based Buffer Overflow
CVE-2025-21221
CWE-122 High
No
No
2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107166 - Heap-based Buffer Overflow
CVE-2025-21222
CWE-122 High
No
No
2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107165 - Heap-based Buffer Overflow
CVE-2025-21205
CWE-122 High
No
No
2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107164 - Heap-based Buffer Overflow
CVE-2025-27477
CWE-122 High
No
No
2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107163 - Stack-based buffer overflow
CVE-2025-27481
CWE-121 High
No
No
2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107162 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27736
CWE-200 Low
No
No
2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040853
#VU107161 - Resource exhaustion
CVE-2025-26641
CWE-400 High
No
No
2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040852
#VU107159 - Use After Free
CVE-2025-29824
CWE-416 High
Public exploit available
Exploited
2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040850
#VU105851 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-9491
CWE-451 High
Public exploit available
Exploited
2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 18.03.2025 SB2025031863
#VU105569 - Improper Access Control
CVE-2024-9157
CWE-284 Low
No
No
2008 R2 6.1.7601.27618, 2008 6.0.6003.23168, 2012 R2 6.3.9600.22470, 2012 6.2.9200.25368, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB20250311102


Showing elements 1421 - 1440 out of 1627