Known vulnerabilities in Windows Server - page 62

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112591 - Protection Mechanism Failure
CVE-2025-47159		 CWE-693 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070945
#VU112589 - Use After Free
CVE-2025-49682		 CWE-416 Low
No
No
 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070931
#VU112588 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-48799		 CWE-59 Low
Available
No
 2022 23H2 10.0.22621.5472, 2025 10.0.26100.4652 09.07.2025 SB2025070929
#VU112587 - Heap-based Buffer Overflow
CVE-2025-49691		 CWE-122 High
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070926
#VU112586 - Use After Free
CVE-2025-49685		 CWE-416 Low
No
No
 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932 09.07.2025 SB2025070925
#VU112585 - Processor optimization removal or modification of security-critical code
CVE-2025-48809		 CWE-1037 Low
No
No
 2022 23H2 10.0.22621.5472, 2025 10.0.26100.4652 09.07.2025 SB2025070924
#VU112584 - Processor optimization removal or modification of security-critical code
CVE-2025-48810		 CWE-1037 Low
No
No
 2022 23H2 10.0.22621.5472, 2025 10.0.26100.4652 09.07.2025 SB2025070924
#VU112583 - Protection Mechanism Failure
CVE-2025-47984		 CWE-693 Medium
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070923
#VU112582 - Improper Access Control
CVE-2025-47993		 CWE-284 Low
No
No
 2022 23H2 10.0.25398.1732, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070922
#VU112580 - NULL Pointer Dereference
CVE-2025-49678		 CWE-476 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070921
#VU112579 - Heap-based Buffer Overflow
CVE-2025-48805		 CWE-122 Medium
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070914
#VU112578 - Use After Free
CVE-2025-48806		 CWE-416 Medium
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070914
#VU112576 - NULL Pointer Dereference
CVE-2025-49694		 CWE-476 Low
No
No
 2022 23H2 10.0.25398.1732, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070913
#VU112575 - Double Free
CVE-2025-49693		 CWE-415 Low
No
No
 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2025 10.0.26100.4652 09.07.2025 SB2025070913
#VU112574 - Out-of-bounds read
CVE-2025-48822		 CWE-125 High
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070912
#VU112572 - Out-of-bounds read
CVE-2025-49658		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070909
#VU112571 - Out-of-bounds read
CVE-2025-49659		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070909
#VU112561 - Use After Free
CVE-2025-49726		 CWE-416 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 09.07.2025 SB2025070906
#VU112560 - Use After Free
CVE-2025-49725		 CWE-416 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070906
#VU112554 - Heap-based Buffer Overflow
CVE-2025-49744		 CWE-122 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070902


Showing elements 1221 - 1240 out of 6300