Known vulnerabilities in Windows Server - page 376

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154642 - Out-of-bounds read
CVE-2026-70208		 CWE-125 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154641 - Heap-based Buffer Overflow
CVE-2026-70207		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154639 - Type confusion
CVE-2026-70205		 CWE-843 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154637 - Out-of-bounds read
CVE-2026-70201		 CWE-125 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154636 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
CVE-2026-70199		 CWE-497 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154635 - Use After Free
CVE-2026-70198		 CWE-416 Low
No
No
 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154632 - Use After Free
CVE-2026-70195		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154628 - Use After Free
CVE-2026-70187		 CWE-416 High
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154626 - Authorization Bypass Through User-Controlled Key
CVE-2026-70185		 CWE-639 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154621 - Numeric Truncation Error
CVE-2026-70177		 CWE-197 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154620 - Use After Free
CVE-2026-70176		 CWE-416 Low
No
No
 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154617 - Out-of-bounds read
CVE-2026-70173		 CWE-125 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154616 - Untrusted Pointer Dereference
CVE-2026-70172		 CWE-822 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154615 - Untrusted Pointer Dereference
CVE-2026-70170		 CWE-822 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154614 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-70169		 CWE-362 Low
No
No
 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154613 - Use After Free
CVE-2026-70168		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154612 - Type confusion
CVE-2026-70167		 CWE-843 Medium
No
No
 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154611 - Out-of-bounds read
CVE-2026-70166		 CWE-125 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154609 - Use After Free
CVE-2026-70164		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402
#VU154608 - Allocation of Resources Without Limits or Throttling
CVE-2026-70163		 CWE-770 Medium
No
No
 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101402


Showing elements 7501 - 7520 out of 8285