Known vulnerabilities in Windows Server - page 55

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115098 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55226		 CWE-362 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB20250909103
#VU115097 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-55236		 CWE-367 Medium
No
No
 2012 R2 6.3.9600.22774, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB20250909103
#VU115092 - Use After Free
CVE-2025-54103		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22774, 2022 23H2 10.0.25398.1849, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090997
#VU115091 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-54105		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2022 23H2 10.0.25398.1849, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090996
#VU115090 - Use After Free
CVE-2025-54112		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22774, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090994
#VU115089 - Improper input validation
CVE-2025-53809		 CWE-20 Medium
No
No
 2012 R2 6.3.9600.22774, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090991
#VU115088 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-54114		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2016 10.0.14393.8422, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090990
#VU115087 - Use After Free
CVE-2025-54102		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22774, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090990
#VU115086 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55223		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22774, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090989
#VU115085 - Improper Authentication
CVE-2025-54918		 CWE-287 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090988
#VU115084 - Stack-based buffer overflow
CVE-2025-54916		 CWE-121 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090987
#VU115078 - Use of Uninitialized Resource
CVE-2025-53799		 CWE-908 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090980
#VU115076 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-54093		 CWE-367 Low
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090978
#VU115075 - Untrusted Pointer Dereference
CVE-2025-53801		 CWE-822 Low
No
No
 2012 R2 6.3.9600.22774, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171 09.09.2025 SB2025090977
#VU115073 - Use After Free
CVE-2025-53802		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22774, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090975
#VU115070 - Information Exposure Through an Error Message
CVE-2025-53803		 CWE-209 Low
No
No
 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090972
#VU115053 - Integer overflow
CVE-2025-54106		 CWE-190 High
No
No
 2012 R2 6.3.9600.22774, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090968
#VU115052 - Heap-based Buffer Overflow
CVE-2025-54113		 CWE-122 High
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090968
#VU115051 - Out-of-bounds read
CVE-2025-55225		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090968
#VU115044 - Out-of-bounds read
CVE-2025-53806		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 09.09.2025 SB2025090968


Showing elements 1081 - 1100 out of 6300