Known vulnerabilities in Windows Server - page 35

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 7208
Public exploits: 498
Known exploited (KEV): 273
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 7208 known vulnerabilities: 95 critical, 1384 high, 1400 medium, 4327 low Critical High Medium Low

Vulnerabilities (7208)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148351 - Use After Free
CVE-2026-85360		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23397, 2012 6.2.9200.26349, 2016 10.0.14393.9512, 2019 10.0.17763.9245, 2022 10.0.20348.5622, 2025 10.0.26100.33438 09.09.2026 SB2026090906
#VU148350 - Out-of-bounds read
CVE-2026-84001		 CWE-125 Medium
No
No
 2012 R2 6.3.9600.23397, 2012 6.2.9200.26349, 2016 10.0.14393.9512, 2019 10.0.17763.9245, 2022 10.0.20348.5622, 2025 10.0.26100.33438 09.09.2026 SB2026090906
#VU148349 - Heap-based Buffer Overflow
CVE-2026-84000		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23397, 2012 6.2.9200.26349, 2016 10.0.14393.9512, 2019 10.0.17763.9245, 2022 10.0.20348.5622, 2025 10.0.26100.33438 09.09.2026 SB2026090906
#VU148348 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-83999		 CWE-59 Low
No
No
 2025 10.0.26100.33438 09.09.2026 SB2026090906
#VU148347 - Heap-based Buffer Overflow
CVE-2026-83998		 CWE-122 High
No
No
 2016 10.0.14393.9512, 2019 10.0.17763.9245, 2022 10.0.20348.5622, 2025 10.0.26100.33438 09.09.2026 SB2026090906
#VU148346 - Use After Free
CVE-2026-83997		 CWE-416 High
No
No
 2022 10.0.20348.5622, 2025 10.0.26100.33438 09.09.2026 SB2026090906
#VU148345 - Heap-based Buffer Overflow
CVE-2026-83996		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23397, 2012 6.2.9200.26349, 2016 10.0.14393.9512, 2019 10.0.17763.9245, 2022 10.0.20348.5622, 2025 10.0.26100.33438 09.09.2026 SB2026090906
#VU148344 - Heap-based Buffer Overflow
CVE-2026-83995		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23397, 2012 6.2.9200.26349, 2016 10.0.14393.9512, 2019 10.0.17763.9245, 2022 10.0.20348.5622, 2025 10.0.26100.33438 09.09.2026 SB2026090906
#VU148343 - Heap-based Buffer Overflow
CVE-2026-83992		 CWE-122 High
No
No
 2012 R2 6.3.9600.23397, 2012 6.2.9200.26349, 2016 10.0.14393.9512, 2019 10.0.17763.9245, 2022 10.0.20348.5622, 2025 10.0.26100.33438 09.09.2026 SB2026090906
#VU147471 - Heap-based Buffer Overflow
CVE-2026-85880		 CWE-122 High
No
Exploited
 2012 R2 6.3.9600.23397, 2012 6.2.9200.26349, 2016 10.0.14393.9512, 2019 10.0.17763.9245, 2022 10.0.20348.5622 08.09.2026 SB2026090867
#VU147470 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-81963		 CWE-59 High
No
Exploited
 2025 10.0.26100.33438 08.09.2026 SB2026090866
#VU144402 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-62727		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23338, 2012 6.2.9200.26280, 2016 10.0.14393.9418, 2019 10.0.17763.9121, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 19.08.2026 SB20260819147
#VU141744 - Use After Free
CVE-2026-61348		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141743 - Heap-based Buffer Overflow
CVE-2026-59134		 CWE-122 Medium
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141742 - Weak Authentication
CVE-2026-59135		 CWE-1390 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141741 - Observable discrepancy
CVE-2026-59130		 CWE-203 Low
No
No
 2012 R2 6.3.9600.23337, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141740 - Integer overflow
CVE-2026-59127		 CWE-190 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141739 - Information Exposure Through Timing Discrepancy
CVE-2026-6727		 CWE-208 Low
No
No
 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141735 - Command injection
CVE-2026-49179		 CWE-77 High
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226
#VU141732 - Heap-based Buffer Overflow
CVE-2026-50472		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23337, 2012 6.2.9200.26279, 2016 10.0.14393.9418, 2019 10.0.17763.9115, 2022 10.0.20348.5440, 2022 10.0.20348.5499, 2025 10.0.26100.33222, 2025 10.0.26100.33296 12.08.2026 SB20260812226


Showing elements 681 - 700 out of 7208