Known vulnerabilities in Windows Server - page 61

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112658 - Exposure of sensitive information to an unauthorized actor
CVE-2025-48808
CWE-200 Low
No
No
2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070998
#VU112657 - Processor optimization removal or modification of security-critical code
CVE-2025-26636
CWE-1037 Low
No
No
2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070998
#VU112647 - Integer overflow
CVE-2025-48816
CWE-190 Low
No
No
2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070995
#VU112645 - NULL Pointer Dereference
CVE-2025-49686
CWE-476 Low
No
No
2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070993
#VU112641 - Protection Mechanism Failure
CVE-2025-48003
CWE-693 Low
No
No
2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112640 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-48001
CWE-367 Low
No
No
2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112636 - Protection Mechanism Failure
CVE-2025-48800
CWE-693 Low
No
No
2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112635 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-48818
CWE-367 Low
No
No
2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112634 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2025-48804
CWE-349 Low
Available
No
2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070992
#VU112633 - Missing Authorization
CVE-2025-49723
CWE-862 Low
No
No
2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070988
#VU112632 - Use After Free
CVE-2025-48821
CWE-416 Medium
No
No
2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070981
#VU112631 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-48819
CWE-591 Medium
No
No
2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070981
#VU112602 - Resource exhaustion
CVE-2025-49722
CWE-400 Medium
No
No
2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070953
#VU112601 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-48820
CWE-59 Low
No
No
2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070952
#VU112599 - Improper input validation
CVE-2025-47982
CWE-20 Low
No
No
2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070951
#VU112598 - Improper Certificate Validation
CVE-2025-48802
CWE-295 Medium
No
No
2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932 09.07.2025 SB2025070949
#VU112596 - Exposure of sensitive information to an unauthorized actor
CVE-2025-48823
CWE-200 Medium
No
No
2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070947
#VU112595 - Use After Free
CVE-2025-49675
CWE-416 Low
No
No
2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070946
#VU112592 - Missing Support for Integrity Check
CVE-2025-48811
CWE-353 Low
No
No
2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070945
#VU112590 - Missing Support for Integrity Check
CVE-2025-48803
CWE-353 Low
No
No
2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070945


Showing elements 1201 - 1220 out of 6300