Known vulnerabilities in Windows Server - page 397

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155136 - Out-of-bounds read
CVE-2026-85374
CWE-125 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155135 - Heap-based Buffer Overflow
CVE-2026-85373
CWE-122 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155134 - Use After Free
CVE-2026-85372
CWE-416 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155133 - Use After Free
CVE-2026-85371
CWE-416 High
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155132 - Use After Free
CVE-2026-85370
CWE-416 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155131 - Out-of-bounds read
CVE-2026-85369
CWE-125 Low
No
No
2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155130 - Heap-based Buffer Overflow
CVE-2026-85368
CWE-122 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155129 - Use After Free
CVE-2026-85367
CWE-416 Low
No
No
2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155128 - Heap-based Buffer Overflow
CVE-2026-85366
CWE-122 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155127 - Heap-based Buffer Overflow
CVE-2026-85365
CWE-122 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155126 - Use After Free
CVE-2026-85364
CWE-416 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155124 - Release of invalid pointer or reference
CVE-2026-85362
CWE-763 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155123 - Use After Free
CVE-2026-85361
CWE-416 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155122 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-85359
CWE-94 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155121 - Heap-based Buffer Overflow
CVE-2026-85358
CWE-122 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155120 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-85357
CWE-362 Low
No
No
2022 10.0.20348.5761 14.10.2026 SB2026101415
#VU155119 - Out-of-bounds read
CVE-2026-85356
CWE-125 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155118 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-85355
CWE-829 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155117 - Use After Free
CVE-2026-85354
CWE-416 Low
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155116 - Out-of-bounds read
CVE-2026-85353
CWE-125 Medium
No
No
2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415


Showing elements 7921 - 7940 out of 8285