Known vulnerabilities in Windows Server - page 17

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137758 - Heap-based Buffer Overflow
CVE-2026-56159
CWE-122 High
No
No
2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071561
#VU137757 - Heap-based Buffer Overflow
CVE-2026-50370
CWE-122 Medium
No
No
2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071561
#VU137755 - Use After Free
CVE-2026-50396
CWE-416 Low
No
No
2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071560
#VU137754 - Use After Free
CVE-2026-50393
CWE-416 Low
No
No
2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071560
#VU137753 - Use After Free
CVE-2026-58602
CWE-416 Low
No
No
2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071560
#VU137752 - Heap-based Buffer Overflow
CVE-2026-58601
CWE-122 Low
No
No
2012 R2 6.3.9600.23291, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071558
#VU137749 - Use After Free
CVE-2026-58526
CWE-416 Low
No
No
2012 R2 6.3.9600.23291, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071554
#VU137748 - Out-of-bounds read
CVE-2026-54126
CWE-125 Medium
No
No
2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071552
#VU137747 - Off-by-one Error
CVE-2026-50497
CWE-193 Medium
No
No
2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071552
#VU137746 - Out-of-bounds read
CVE-2026-50445
CWE-125 Medium
No
No
2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071552
#VU137745 - Out-of-bounds read
CVE-2026-57979
CWE-125 Medium
No
No
2012 R2 6.3.9600.23291, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071552
#VU137744 - Use of Uninitialized Resource
CVE-2026-55003
CWE-908 Medium
No
No
2012 R2 6.3.9600.23291, 2012 6.2.9200.26226, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071552
#VU137743 - Use After Free
CVE-2026-50674
CWE-416 Low
No
No
2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071549
#VU137742 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-49806
CWE-362 Low
No
No
2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071549
#VU137741 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-49802
CWE-362 Low
No
No
2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071549
#VU137740 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-54996
CWE-362 Low
No
No
2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071549
#VU137739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-54991
CWE-362 Low
No
No
2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071549
#VU137738 - Use After Free
CVE-2026-55000
CWE-416 Low
No
No
2012 R2 6.3.9600.23291, 2025 10.0.26100.33158 15.07.2026 SB2026071549
#VU137736 - Stack-based buffer overflow
CVE-2026-50318
CWE-121 Low
No
No
2012 R2 6.3.9600.23291, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071545
#VU137725 - Numeric Truncation Error
CVE-2026-49792
CWE-197 Medium
No
No
2012 R2 6.3.9600.23291, 2016 10.0.14393.9339, 2019 10.0.17763.9020, 2022 10.0.20348.5386, 2025 10.0.26100.33158 15.07.2026 SB2026071545


Showing elements 321 - 340 out of 6300