Known vulnerabilities in Windows Server - page 28

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131263 - Improper Access Control
CVE-2026-32209		 CWE-284 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512123
#VU131262 - Integer underflow
CVE-2026-40397		 CWE-191 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512122
#VU131261 - Heap-based Buffer Overflow
CVE-2026-40407		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512122
#VU131260 - Heap-based Buffer Overflow
CVE-2026-40380		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512121
#VU131257 - Heap-based Buffer Overflow
CVE-2026-40377		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512118
#VU131255 - Missing release of memory after effective lifetime
CVE-2026-35424		 CWE-401 Medium
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512116
#VU131254 - Out-of-bounds read
CVE-2026-35423		 CWE-125 Medium
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512115
#VU131244 - Heap-based Buffer Overflow
CVE-2026-35421		 CWE-122 High
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512111
#VU131243 - Out-of-bounds read
CVE-2026-34336		 CWE-125 Low
No
No
 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512110
#VU131241 - Integer overflow
CVE-2026-42896		 CWE-190 Low
No
No
 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512110
#VU131239 - Out-of-bounds read
CVE-2026-35419		 CWE-125 Low
No
No
 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512110
#VU131237 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-35422		 CWE-288 Medium
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512108
#VU131224 - NULL Pointer Dereference
CVE-2026-34350		 CWE-476 Medium
No
No
 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512107
#VU131223 - External Control of File Name or Path
CVE-2026-41088		 CWE-73 Low
No
No
 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512106
#VU131222 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-34345		 CWE-362 Low
No
No
 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512106
#VU131221 - Use After Free
CVE-2026-35416		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512106
#VU131220 - Type confusion
CVE-2026-34344		 CWE-843 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512106
#VU131219 - Heap-based Buffer Overflow
CVE-2026-34343		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512105
#VU131217 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-34342		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512103
#VU131214 - Use After Free
CVE-2026-34333		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5074, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB20260512102


Showing elements 541 - 560 out of 6300