Known vulnerabilities in Windows Server - page 136

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98212 - Heap-based Buffer Overflow
CVE-2024-43518
CWE-122 High
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100884
#VU98202 - Double Free
CVE-2024-43514
CWE-415 Low
No
No
2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100880
#VU98201 - Out-of-bounds read
CVE-2024-43500
CWE-125 Low
No
No
2022 23H2 10.0.25398.1189 08.10.2024 SB2024100880
#VU98199 - Incorrect Check of Function Return Value
CVE-2024-43521
CWE-253 Medium
No
No
2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98198 - Allocation of Resources Without Limits or Throttling
CVE-2024-43567
CWE-770 Medium
No
No
2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98197 - Improper input validation
CVE-2024-20659
CWE-20 Low
No
No
2012 R2 6.3.9600.22221, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98196 - Improper input validation
CVE-2024-30092
CWE-20 Medium
No
No
2012 R2 6.3.9600.22221, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98195 - Resource exhaustion
CVE-2024-43575
CWE-400 Medium
No
No
2012 R2 6.3.9600.22221, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98194 - Missing Required Cryptographic Step
CVE-2024-43547
CWE-325 Medium
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100868
#VU98192 - Improper Authorization
CVE-2024-38129
CWE-285 Medium
No
No
2022 23H2 10.0.25398.1189 08.10.2024 SB2024100868
#VU98191 - Improper input validation
CVE-2024-38265
CWE-20 High
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98190 - Heap-based Buffer Overflow
CVE-2024-43564
CWE-122 High
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98189 - Heap-based Buffer Overflow
CVE-2024-43453
CWE-122 High
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98188 - Heap-based Buffer Overflow
CVE-2024-43608
CWE-122 High
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98187 - Heap-based Buffer Overflow
CVE-2024-43607
CWE-122 High
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98186 - Improper input validation
CVE-2024-38261
CWE-20 High
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98185 - Improper input validation
CVE-2024-43592
CWE-20 Medium
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98184 - Improper input validation
CVE-2024-43611
CWE-20 Medium
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98183 - Heap-based Buffer Overflow
CVE-2024-43589
CWE-122 High
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98180 - Stack-based buffer overflow
CVE-2024-43549
CWE-121 High
No
No
2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867


Showing elements 2701 - 2720 out of 8285