Known vulnerabilities in Windows Server - page 22

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134430 - Heap-based Buffer Overflow
CVE-2026-45653		 CWE-122 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061220
#VU134429 - Use After Free
CVE-2026-48583		 CWE-416 Low
No
No
 2004 10.0.19045.7417, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061220
#VU134427 - Out-of-bounds read
CVE-2026-42968		 CWE-125 Low
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 12.06.2026 SB2026061219
#VU134423 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42912		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 12.06.2026 SB2026061218
#VU134418 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42907		 CWE-200 Medium
No
No
 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 12.06.2026 SB2026061216
#VU134417 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42906		 CWE-200 Low
No
No
 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 12.06.2026 SB2026061216
#VU134416 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42836		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 12.06.2026 SB2026061215
#VU134415 - Missing Authentication for Critical Function
CVE-2026-50507		 CWE-306 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655 12.06.2026 SB2026061214
#VU134414 - Improper Access Control
CVE-2026-45658		 CWE-284 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061214
#VU134413 - Protection Mechanism Failure
CVE-2026-45655		 CWE-693 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061214
#VU134412 - Use After Free
CVE-2026-45605		 CWE-416 Low
No
No
 2004 10.0.19045.7417, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061213
#VU134359 - Integer overflow
CVE-2026-47288		 CWE-190 Medium
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061151
#VU134358 - Stack-based buffer overflow
CVE-2026-45648		 CWE-121 Medium
No
No
 2004 10.0.19045.7417, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061150
#VU134357 - Use After Free
CVE-2026-45640		 CWE-416 Low
No
No
 2004 10.0.19045.7417, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061149
#VU134356 - Incorrect Calculation of Buffer Size
CVE-2026-42915		 CWE-131 Medium
No
No
 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061148
#VU134355 - Heap-based Buffer Overflow
CVE-2026-42904		 CWE-122 Medium
No
No
 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061148
#VU134354 - Out-of-bounds read
CVE-2026-42837		 CWE-125 Low
No
No
 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061147
#VU134353 - Out-of-bounds read
CVE-2026-42828		 CWE-125 Low
No
No
 2004 10.0.19045.7417, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061147
#VU134352 - Improper Authentication
CVE-2026-44810		 CWE-287 Low
No
No
 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061146
#VU134351 - Use After Free
CVE-2026-42986		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061145


Showing elements 421 - 440 out of 6300