Known vulnerabilities in Windows Server - page 110

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112482 - Heap-based Buffer Overflow
CVE-2025-49753		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070842
#VU112481 - Heap-based Buffer Overflow
CVE-2025-48824		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070842
#VU112480 - Exposure of sensitive information to an unauthorized actor
CVE-2025-49671		 CWE-200 Medium
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070842
#VU112477 - Exposure of sensitive information to an unauthorized actor
CVE-2025-47980		 CWE-200 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070841
#VU112476 - Integer overflow
CVE-2025-48002		 CWE-190 Medium
No
No
 2022 23H2 10.0.22621.5472, 2025 10.0.26100.4652 08.07.2025 SB2025070840
#VU112475 - Missing Synchronization
CVE-2025-47999		 CWE-820 Medium
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070840
#VU112474 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-48817		 CWE-22 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070839
#VU111029 - Untrusted Pointer Dereference
CVE-2025-3052		 CWE-822 Low
Available
No
 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 11.06.2025 SB2025061102
#VU111026 - Improper Access Control
CVE-2025-32722		 CWE-284 Low
No
No
 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB20250610112
#VU111025 - Heap-based Buffer Overflow
CVE-2025-32713		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB20250610111
#VU110755 - Missing release of memory after effective lifetime
CVE-2025-29828		 CWE-401 High
No
No
 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061096
#VU110753 - Improper Privilege Management
CVE-2025-47955		 CWE-269 Low
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2008 6.0.6003.23317, 2012 R2 6.3.9600.22577, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 10.06.2025 SB2025061094
#VU110752 - Use of Uninitialized Resource
CVE-2025-33070		 CWE-908 High
No
No
 2008 R2 6.1.7601.27769, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061093
#VU110750 - Use After Free
CVE-2025-32710		 CWE-416 High
Available
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2008 6.0.6003.23317, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 10.06.2025 SB2025061091
#VU110749 - Improper Verification of Cryptographic Signature
CVE-2025-33069		 CWE-347 Low
No
No
 2012 R2 6.3.9600.22620, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061090
#VU110748 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-32721		 CWE-59 Low
No
No
 2012 R2 6.3.9600.22620, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061089
#VU110747 - Protection Mechanism Failure
CVE-2025-47160		 CWE-693 Medium
No
No
 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061088
#VU110744 - Improper Privilege Management
CVE-2025-33067		 CWE-269 Low
No
No
 2012 R2 6.3.9600.22620, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061086
#VU110743 - Exposure of sensitive information to an unauthorized actor
CVE-2025-47969		 CWE-200 Low
No
No
 2012 R2 6.3.9600.22620, 2025 10.0.26100.3981, 2025 10.0.26100.4061 10.06.2025 SB2025061085
#VU110742 - Out-of-bounds read
CVE-2025-32716		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807 10.06.2025 SB2025061084


Showing elements 2181 - 2200 out of 8285