Known vulnerabilities in Windows Server - page 36

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123783 - Use After Free
CVE-2026-25167
CWE-416 Low
No
No
2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310130
#VU123782 - Use After Free
CVE-2026-25170
CWE-416 Low
No
No
2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310129
#VU123781 - Use After Free
CVE-2026-25171
CWE-416 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310128
#VU123778 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24297
CWE-362 Medium
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2025 10.0.26100.32463 10.03.2026 SB20260310126
#VU123777 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24296
CWE-362 Low
No
No
2012 R2 6.3.9600.23074, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310125
#VU123776 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24295
CWE-362 Low
No
No
2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310125
#VU123775 - Out-of-bounds read
CVE-2026-23672
CWE-125 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310124
#VU123774 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23671
CWE-362 Low
No
No
2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310123
#VU123773 - Use After Free
CVE-2026-23669
CWE-416 Medium
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310122
#VU123770 - Out-of-bounds read
CVE-2026-25175
CWE-125 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463 10.03.2026 SB20260310119
#VU123756 - Untrusted Search Path
CVE-2026-25190
CWE-426 High
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310111
#VU123755 - Use After Free
CVE-2026-25189
CWE-416 Low
No
No
2019 10.0.17763.8511, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463 10.03.2026 SB20260310110
#VU123751 - NULL Pointer Dereference
CVE-2026-24293
CWE-476 Low
No
No
2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310105
#VU123748 - Improper Access Control
CVE-2026-25176
CWE-284 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310105
#VU123747 - Improper Validation of Specified Type of Input
CVE-2026-25179
CWE-1287 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310105
#VU123746 - Use After Free
CVE-2026-25178
CWE-416 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310105
#VU123745 - Use After Free
CVE-2026-24289
CWE-416 Low
No
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310104
#VU123744 - External Control of File Name or Path
CVE-2026-24287
CWE-73 Low
No
No
2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310104
#VU123743 - Use After Free
CVE-2026-26132
CWE-416 Low
No
No
2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310104
#VU123742 - Improper Restriction of Names for Files and Other Resources
CVE-2026-25177
CWE-641 Medium
Available
No
2012 R2 6.3.9600.23074, 2012 6.2.9200.25973, 2016 10.0.14393.8957, 2019 10.0.17763.8511, 2022 23H2 10.0.25398.2207, 2022 10.0.20348.4830, 2022 10.0.20348.4893, 2025 10.0.26100.32463, 2025 10.0.26100.32522 10.03.2026 SB20260310103


Showing elements 701 - 720 out of 6300