Known vulnerabilities in Windows Server - page 16

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137789 - Use After Free
CVE-2026-50493		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23291, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071591
#VU137787 - Use After Free
CVE-2026-50296		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23291, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071591
#VU137786 - Exposure of sensitive information to an unauthorized actor
CVE-2026-50352		 CWE-200 Low
No
No
 2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071582
#VU137785 - Improper Certificate Validation
CVE-2026-50302		 CWE-295 Low
No
No
 2012 R2 6.3.9600.23291, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071582
#VU137783 - Stack-based buffer overflow
CVE-2026-50400		 CWE-121 Low
No
No
 2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071580
#VU137782 - Use After Free
CVE-2026-48571		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071580
#VU137781 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-48572		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071580
#VU137780 - Heap-based Buffer Overflow
CVE-2026-42990		 CWE-122 High
No
No
 2012 R2 6.3.9600.23228, 2012 R2 6.3.9600.23291, 2012 6.2.9200.26132, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071579
#VU137779 - Heap-based Buffer Overflow
CVE-2026-42975		 CWE-122 Medium
No
No
 2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071578
#VU137774 - Incorrect Implementation of Authentication Algorithm
CVE-2026-50360		 CWE-303 Medium
No
No
 2012 R2 6.3.9600.23291, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071575
#VU137773 - Use of Uninitialized Resource
CVE-2026-50690		 CWE-908 Low
No
No
 2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071575
#VU137772 - Use of Uninitialized Resource
CVE-2026-49801		 CWE-908 Low
No
No
 2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071575
#VU137771 - Use of Uninitialized Resource
CVE-2026-54997		 CWE-908 Low
No
No
 2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071575
#VU137767 - Heap-based Buffer Overflow
CVE-2026-56189		 CWE-122 High
No
No
 2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071571
#VU137766 - Heap-based Buffer Overflow
CVE-2026-50655		 CWE-122 High
No
No
 2012 R2 6.3.9600.23291, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071571
#VU137765 - Heap-based Buffer Overflow
CVE-2026-58610		 CWE-122 High
No
No
 2012 R2 6.3.9600.23291, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071571
#VU137764 - Heap-based Buffer Overflow
CVE-2026-54993		 CWE-122 High
No
No
 2012 R2 6.3.9600.23291, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071571
#VU137760 - Use After Free
CVE-2026-56173		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23291, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071563
#VU137759 - Use After Free
CVE-2026-50359		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071562
#VU137756 - Heap-based Buffer Overflow
CVE-2026-48564		 CWE-122 Medium
No
No
 2012 R2 6.3.9600.23228, 2012 R2 6.3.9600.23291, 2012 6.2.9200.26132, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071561


Showing elements 301 - 320 out of 6300