Known vulnerabilities in Windows Server - page 407

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155405 - Buffer over-read
CVE-2026-95904		 CWE-126 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155401 - Out-of-bounds read
CVE-2026-88226		 CWE-125 Medium
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155400 - Untrusted Pointer Dereference
CVE-2026-88219		 CWE-822 High
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155385 - Out-of-bounds read
CVE-2026-88194		 CWE-125 Low
No
No
 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155384 - Heap-based Buffer Overflow
CVE-2026-88193		 CWE-122 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155382 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-88191		 CWE-59 Low
No
No
 2012 R2 6.3.9600.23470, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155380 - Out-of-bounds read
CVE-2026-88189		 CWE-125 Low
No
No
 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155379 - Out-of-bounds read
CVE-2026-88188		 CWE-125 Low
No
No
 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155374 - Use After Free
CVE-2026-88182		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23470, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155373 - Out-of-bounds read
CVE-2026-88181		 CWE-125 Low
No
No
 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155372 - Out-of-bounds read
CVE-2026-88180		 CWE-125 Low
No
No
 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155371 - Out-of-bounds read
CVE-2026-88179		 CWE-125 Low
No
No
 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155369 - Out-of-bounds read
CVE-2026-88177		 CWE-125 Low
No
No
 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155367 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-88174		 CWE-362 High
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155366 - Use After Free
CVE-2026-88173		 CWE-416 High
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155364 - Double Free
CVE-2026-88171		 CWE-415 High
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155362 - Heap-based Buffer Overflow
CVE-2026-88168		 CWE-122 Low
No
No
 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155359 - Out-of-bounds write
CVE-2026-88165		 CWE-787 Medium
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155357 - Incorrect Authorization
CVE-2026-88162		 CWE-863 Low
No
No
 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415
#VU155356 - Use After Free
CVE-2026-88161		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23470, 2012 6.2.9200.26434, 2016 10.0.14393.9612, 2019 10.0.17763.9376, 2022 10.0.20348.5761, 2025 10.0.26100.33650 14.10.2026 SB2026101415


Showing elements 8121 - 8140 out of 8285