Known vulnerabilities in Windows Server - page 132

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101397 - Integer overflow
CVE-2024-49089		 CWE-190 Low
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121076
#VU101396 - Heap-based Buffer Overflow
CVE-2024-49102		 CWE-122 High
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121076
#VU101394 - Heap-based Buffer Overflow
CVE-2024-49138		 CWE-122 High
Available
Exploited
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121075
#VU100410 - Use After Free
CVE-2024-43625		 CWE-416 Low
No
No
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112165
#VU100409 - Numeric Truncation Error
CVE-2024-43639		 CWE-197 High
No
No
 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2016 10.0.14393.7515, 2019 10.0.17763.6532, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112164
#VU100408 - Integer overflow
CVE-2024-43623		 CWE-190 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.1742, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112163
#VU100406 - Out-of-bounds read
CVE-2024-43644		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112161
#VU100405 - Double Free
CVE-2024-43640		 CWE-415 Low
No
No
 2022 10.0.20348.2849 12.11.2024 SB20241112160
#VU100402 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CVE-2024-43450		 CWE-924 Medium
No
No
 2008 R2 6.1.7601.27415, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2016 10.0.14393.7515, 2019 10.0.17763.6532, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112153
#VU100400 - Integer overflow
CVE-2024-43641		 CWE-190 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112151
#VU100399 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-43452		 CWE-367 Medium
No
No
 2008 6.0.6003.22966, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112151
#VU100393 - Use After Free
CVE-2024-43642		 CWE-416 Medium
No
No
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112146
#VU100384 - Protection Mechanism Failure
CVE-2024-38203		 CWE-693 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112143
#VU100382 - Sensitive Data Storage in Improperly Locked Memory
CVE-2024-38264		 CWE-591 Medium
No
No
 2022 23H2 10.0.25398.1251, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112141
#VU100381 - Improper Authentication
CVE-2024-49019		 CWE-287 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2016 10.0.14393.7515, 2019 10.0.17763.6532, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112140
#VU100370 - Untrusted Pointer Dereference
CVE-2024-43629		 CWE-822 Low
No
No
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112137
#VU100368 - Double Free
CVE-2024-43447		 CWE-415 High
No
No
 2022 10.0.20348.2849 12.11.2024 SB20241112135
#VU100367 - Stack-based buffer overflow
CVE-2024-43630		 CWE-121 Low
No
No
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112134
#VU100366 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-49046		 CWE-367 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112133
#VU100348 - Untrusted Pointer Dereference
CVE-2024-43636		 CWE-822 Low
No
No
 2012 R2 6.3.9600.22267, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112123


Showing elements 2621 - 2640 out of 8285