Known vulnerabilities in Windows Server - page 23

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134350 - Integer overflow
CVE-2026-42974		 CWE-190 High
No
No
 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061144
#VU134349 - Integer underflow
CVE-2026-42981		 CWE-191 High
No
No
 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061144
#VU134348 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42972		 CWE-200 Low
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061143
#VU134347 - Heap-based Buffer Overflow
CVE-2026-47652		 CWE-122 Low
No
No
 2004 10.0.19045.7417, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061143
#VU134346 - Type confusion
CVE-2026-45641		 CWE-843 High
No
No
 2004 10.0.19045.7417, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061143
#VU134345 - Out-of-bounds read
CVE-2026-45607		 CWE-125 High
No
No
 2004 10.0.19045.7417, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061143
#VU134344 - Use After Free
CVE-2026-42911		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061140
#VU134343 - Heap-based Buffer Overflow
CVE-2026-45638		 CWE-122 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061140
#VU134342 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-45603		 CWE-362 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061140
#VU134341 - Use After Free
CVE-2026-45596		 CWE-416 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061140
#VU134340 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-45598		 CWE-362 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061140
#VU134339 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-45601		 CWE-362 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061140
#VU134338 - Use After Free
CVE-2026-34335		 CWE-416 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061140
#VU134337 - Heap-based Buffer Overflow
CVE-2026-42993		 CWE-122 High
No
No
 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061139
#VU134336 - Use After Free
CVE-2026-42985		 CWE-416 High
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061139
#VU134335 - Use After Free
CVE-2026-44801		 CWE-416 High
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061139
#VU134334 - Heap-based Buffer Overflow
CVE-2026-44799		 CWE-122 High
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061139
#VU134333 - Heap-based Buffer Overflow
CVE-2026-42992		 CWE-122 High
No
No
 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061139
#VU134332 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-42913		 CWE-362 High
No
No
 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 11.06.2026 SB2026061139
#VU134327 - Heap-based Buffer Overflow
CVE-2026-47289		 CWE-122 High
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 11.06.2026 SB2026061139


Showing elements 441 - 460 out of 6300