Known vulnerabilities in Windows Server - page 138

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98170 - Improper input validation
CVE-2024-43523		 CWE-20 Low
No
No
 2022 23H2 10.0.25398.1189 08.10.2024 SB2024100858
#VU98160 - Incorrect Access of Indexable Resource (\'Range Error\')
CVE-2024-43524		 CWE-118 Low
No
No
 2022 23H2 10.0.25398.1189 08.10.2024 SB2024100858
#VU98159 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-43536		 CWE-601 Low
No
No
 2022 23H2 10.0.25398.1189 08.10.2024 SB2024100858
#VU98158 - Improper input validation
CVE-2024-43572		 CWE-20 Critical
No
Exploited
 2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100857
#VU98157 - Improper input validation
CVE-2024-43557		 CWE-20 Low
No
No
 2022 23H2 10.0.25398.1189 08.10.2024 SB2024100858
#VU98156 - Improper input validation
CVE-2024-43558		 CWE-20 Low
No
No
 2022 23H2 10.0.25398.1189 08.10.2024 SB2024100858
#VU98154 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43573		 CWE-79 Medium
No
Exploited
 2012 R2 6.3.9600.22221, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100856
#VU97660 - Improper Link Resolution Before File Access ('Link Following')
CVE-2019-1069		 CWE-59 High
No
Exploited
 2016 10.0.14393.3025, 2019 10.0.17763.557 24.09.2024 SB2019061125
#VU97115 - Improper Resolution of Path Equivalence
CVE-2024-30073		 CWE-41 High
No
No
 2008 R2 6.1.7601.27320, 2008 6.0.6003.22870, 2012 R2 6.3.9600.22175, 2012 6.2.9200.25073, 2022 23H2 10.0.25398.1128, 2022 10.0.20348.2695, 2022 10.0.20348.2700 10.09.2024 SB20240910153
#VU97114 - Protection Mechanism Failure
CVE-2024-43487		 CWE-693 Medium
No
No
 2012 R2 6.3.9600.22175, 2012 6.2.9200.25073 10.09.2024 SB20240910152
#VU97113 - Use After Free
CVE-2024-38235		 CWE-416 Low
No
No
 2022 23H2 10.0.25398.1128, 2022 10.0.20348.2695, 2022 10.0.20348.2700 10.09.2024 SB20240910151
#VU97112 - Out-of-bounds read
CVE-2024-43475		 CWE-125 Medium
No
No
 2008 6.0.6003.22870, 2022 23H2 10.0.25398.1128 10.09.2024 SB20240910150
#VU97111 - Use After Free
CVE-2024-38248		 CWE-416 Low
No
No
 2022 23H2 10.0.25398.1128, 2022 10.0.20348.2695, 2022 10.0.20348.2700 10.09.2024 SB20240910149
#VU97110 - Resource exhaustion
CVE-2024-38236		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27320, 2008 6.0.6003.22870, 2012 R2 6.3.9600.22175, 2012 6.2.9200.25073, 2016 10.0.14393.7336, 2019 10.0.17763.6293, 2022 23H2 10.0.25398.1128, 2022 10.0.20348.2695, 2022 10.0.20348.2700 10.09.2024 SB20240910148
#VU97105 - Heap-based Buffer Overflow
CVE-2024-38237		 CWE-122 Low
No
No
 2022 23H2 10.0.25398.1128, 2022 10.0.20348.2695, 2022 10.0.20348.2700 10.09.2024 SB20240910143
#VU97103 - Out-of-bounds read
CVE-2024-38240		 CWE-125 High
No
No
 2012 R2 6.3.9600.22175, 2022 23H2 10.0.25398.1128, 2022 10.0.20348.2695, 2022 10.0.20348.2700 10.09.2024 SB20240910141
#VU97102 - Use of Uninitialized Resource
CVE-2024-38256		 CWE-908 Low
No
No
 2008 R2 6.1.7601.27320, 2008 6.0.6003.22870, 2012 R2 6.3.9600.22175, 2012 6.2.9200.25073, 2022 23H2 10.0.25398.1128 10.09.2024 SB20240910140
#VU97098 - Use of Uninitialized Resource
CVE-2024-38257		 CWE-908 Medium
No
No
 2022 23H2 10.0.25398.1128, 2022 10.0.20348.2695, 2022 10.0.20348.2700 10.09.2024 SB20240910136
#VU97080 - Improper input validation
CVE-2024-38245		 CWE-20 Low
No
No
 2008 R2 6.1.7601.27320, 2008 6.0.6003.22870, 2012 R2 6.3.9600.22175, 2012 6.2.9200.25073, 2022 23H2 10.0.25398.1128, 2022 10.0.20348.2695, 2022 10.0.20348.2700 10.09.2024 SB20240910126
#VU97074 - Improper input validation
CVE-2024-38241		 CWE-20 Low
No
No
 2022 23H2 10.0.25398.1128, 2022 10.0.20348.2695, 2022 10.0.20348.2700 10.09.2024 SB20240910126


Showing elements 2741 - 2760 out of 8285