Known vulnerabilities in Windows Server - page 54

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115962 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59220		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 19.09.2025 SB20250919142
#VU115961 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59216		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2025 10.0.26100.6508, 2025 10.0.26100.6584 19.09.2025 SB20250919141
#VU115959 - Use After Free
CVE-2025-59215		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22774, 2025 10.0.26100.6508, 2025 10.0.26100.6584 19.09.2025 SB20250919139
#VU115130 - Heap-based Buffer Overflow
CVE-2025-54894		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091017
#VU115129 - Integer overflow
CVE-2025-54110		 CWE-190 Low
Available
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091016
#VU115128 - Stack-based buffer overflow
CVE-2025-54099		 CWE-121 Low
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091015
#VU115127 - Exposure of sensitive information to an unauthorized actor
CVE-2025-53804		 CWE-200 Low
No
No
 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091014
#VU115113 - Improper Resolution of Path Equivalence
CVE-2025-54107		 CWE-41 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091008
#VU115112 - Protection Mechanism Failure
CVE-2025-54917		 CWE-693 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091008
#VU115111 - Out-of-bounds read
CVE-2025-53805		 CWE-125 Medium
No
No
 2012 R2 6.3.9600.22774, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091007
#VU115110 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-54913		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091006
#VU115109 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2025-49734		 CWE-923 Low
No
No
 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091005
#VU115108 - Integer overflow
CVE-2025-54895		 CWE-190 Low
No
No
 2008 R2 6.1.7601.27929, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091004
#VU115107 - Use After Free
CVE-2025-54111		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22774, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091003
#VU115106 - Use After Free
CVE-2025-54101		 CWE-416 Medium
No
No
 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171 10.09.2025 SB2025091002
#VU115105 - Improper Authentication
CVE-2025-55234		 CWE-287 High
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091001
#VU115103 - Use After Free
CVE-2025-54912		 CWE-416 Low
No
No
 2008 R2 6.1.7601.27929, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB20250909108
#VU115102 - Use After Free
CVE-2025-54911		 CWE-416 Low
No
No
 2008 R2 6.1.7601.27929, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB20250909108
#VU115101 - Improper Access Control
CVE-2025-54116		 CWE-284 Low
No
No
 2012 R2 6.3.9600.22774, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB20250909106
#VU115100 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-54108		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB20250909105


Showing elements 1061 - 1080 out of 6300