Known vulnerabilities in Windows Server - page 63

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112558 - Heap-based Buffer Overflow
CVE-2025-49732		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 09.07.2025 SB2025070902
#VU112555 - Integer overflow
CVE-2025-49742		 CWE-190 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070902
#VU112551 - Heap-based Buffer Overflow
CVE-2025-49727		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070881
#VU112550 - Use After Free
CVE-2025-49733		 CWE-416 Low
No
No
 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070881
#VU112548 - Heap-based Buffer Overflow
CVE-2025-47987		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070880
#VU112547 - Numeric Truncation Error
CVE-2025-49679		 CWE-197 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070879
#VU112546 - Exposure of sensitive information to an unauthorized actor
CVE-2025-49664		 CWE-200 Low
No
No
 2008 R2 6.1.7601.27820, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070878
#VU112545 - Heap-based Buffer Overflow
CVE-2025-49666		 CWE-122 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070877
#VU112544 - External Control of File Name or Path
CVE-2025-49760		 CWE-73 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070876
#VU112543 - Use After Free
CVE-2025-48000		 CWE-416 Low
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070875
#VU112542 - Use After Free
CVE-2025-49724		 CWE-416 High
No
No
 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070875
#VU112539 - Use After Free
CVE-2025-47986		 CWE-416 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070873
#VU112531 - Use After Free
CVE-2025-49660		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22676, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070871
#VU112530 - Untrusted Pointer Dereference
CVE-2025-47985		 CWE-822 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070871
#VU112525 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-49730		 CWE-367 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070867
#VU112522 - Out-of-bounds read
CVE-2025-49684		 CWE-125 Low
No
No
 2012 R2 6.3.9600.22676, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070864
#VU112521 - Use After Free
CVE-2025-49735		 CWE-416 High
No
No
 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.10240.21034, 2022 23H2 10.0.22621.5472, 2022 10.0.20348.3807, 2025 10.0.26200.4349 08.07.2025 SB2025070863
#VU112520 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-49665		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070862
#VU112519 - Untrusted Pointer Dereference
CVE-2025-49661		 CWE-822 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070861
#VU112518 - Integer underflow
CVE-2025-47996		 CWE-191 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070860


Showing elements 1241 - 1260 out of 6300