Known vulnerabilities in Windows Server - page 45

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119461 - Heap-based Buffer Overflow
CVE-2025-62470		 CWE-122 Low
No
No
 2008 R2 6.1.7601.28064, 2008 6.0.6003.23666, 2012 R2 6.3.9600.22920, 2012 6.2.9200.25815, 2016 10.0.14393.8688, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120970
#VU119460 - NULL Pointer Dereference
CVE-2025-62466		 CWE-476 Low
No
No
 2008 R2 6.1.7601.28064, 2008 6.0.6003.23666, 2012 R2 6.3.9600.22920, 2012 6.2.9200.25815, 2016 10.0.14393.8688, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120968
#VU119459 - Heap-based Buffer Overflow
CVE-2025-62458		 CWE-122 Low
No
No
 2008 R2 6.1.7601.28064, 2012 R2 6.3.9600.22920, 2012 6.2.9200.25815, 2016 10.0.14393.8688, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529 09.12.2025 SB2025120967
#VU119458 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-64658		 CWE-362 Low
No
No
 2008 6.0.6003.23666, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120966
#VU119457 - Use After Free
CVE-2025-62565		 CWE-416 Low
No
No
 2008 6.0.6003.23666, 2016 10.0.14393.8688, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120966
#VU119454 - Improper Access Control
CVE-2025-62570		 CWE-284 Low
No
No
 2008 6.0.6003.23666, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120963
#VU119450 - Use After Free
CVE-2025-62569		 CWE-416 Low
No
No
 2008 6.0.6003.23666, 2022 23H2 10.0.25398.2025, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120959
#VU119449 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-62469		 CWE-362 Low
No
No
 2008 6.0.6003.23666, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120959
#VU119447 - Improper Access Control
CVE-2025-62474		 CWE-284 Low
No
No
 2008 R2 6.1.7601.28064, 2008 6.0.6003.23666, 2012 R2 6.3.9600.22920, 2012 6.2.9200.25815, 2016 10.0.14393.8688, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120957
#VU119446 - Use of Uninitialized Resource
CVE-2025-62472		 CWE-908 Low
No
No
 2008 R2 6.1.7601.28064, 2008 6.0.6003.23666, 2012 R2 6.3.9600.22920, 2012 6.2.9200.25815, 2016 10.0.14393.8688, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120957
#VU119442 - Out-of-bounds read
CVE-2025-62468		 CWE-125 Low
No
No
 2008 6.0.6003.23666, 2022 23H2 10.0.25398.2025, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120954
#VU119439 - Use After Free
CVE-2025-62573		 CWE-416 Low
No
No
 2008 6.0.6003.23666, 2016 10.0.14393.8688, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120950
#VU119437 - NULL Pointer Dereference
CVE-2025-62463		 CWE-476 Low
No
No
 2008 6.0.6003.23666, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120950
#VU119436 - NULL Pointer Dereference
CVE-2025-62465		 CWE-476 Low
No
No
 2008 6.0.6003.23666, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120950
#VU119434 - Integer overflow
CVE-2025-62467		 CWE-190 Low
No
No
 2008 6.0.6003.23666, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120948
#VU119433 - Out-of-bounds read
CVE-2025-55233		 CWE-125 Low
No
No
 2008 6.0.6003.23666, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120948
#VU119432 - Out-of-bounds read
CVE-2025-62464		 CWE-125 Low
No
No
 2008 6.0.6003.23666, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120948
#VU119431 - Use After Free
CVE-2025-62221		 CWE-416 High
No
Exploited
 2008 6.0.6003.23666, 2019 10.0.17763.8146, 2022 23H2 10.0.25398.2025, 2022 10.0.20348.4467, 2022 10.0.20348.4529, 2025 10.0.26100.7392, 2025 10.0.26100.7462 09.12.2025 SB2025120947
#VU118317 - Untrusted Pointer Dereference
CVE-2025-60708		 CWE-822 Low
No
No
 2008 R2 6.1.7601.28021, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111188
#VU118314 - Out-of-bounds read
CVE-2025-60709		 CWE-125 Low
Available
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111178


Showing elements 881 - 900 out of 6300