Known vulnerabilities in Windows Server - page 65

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112489 - Heap-based Buffer Overflow
CVE-2025-49657		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070842
#VU112488 - Heap-based Buffer Overflow
CVE-2025-49669		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070842
#VU112487 - Heap-based Buffer Overflow
CVE-2025-49668		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070842
#VU112486 - Heap-based Buffer Overflow
CVE-2025-49674		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070842
#VU112485 - Heap-based Buffer Overflow
CVE-2025-49672		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070842
#VU112484 - Heap-based Buffer Overflow
CVE-2025-49670		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070842
#VU112483 - Heap-based Buffer Overflow
CVE-2025-49673		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070842
#VU112482 - Heap-based Buffer Overflow
CVE-2025-49753		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070842
#VU112481 - Heap-based Buffer Overflow
CVE-2025-48824		 CWE-122 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070842
#VU112480 - Exposure of sensitive information to an unauthorized actor
CVE-2025-49671		 CWE-200 Medium
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652, 2025 10.0.26200.4349 08.07.2025 SB2025070842
#VU112477 - Exposure of sensitive information to an unauthorized actor
CVE-2025-47980		 CWE-200 Low
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070841
#VU112476 - Integer overflow
CVE-2025-48002		 CWE-190 Medium
No
No
 2022 23H2 10.0.22621.5472, 2025 10.0.26100.4652 08.07.2025 SB2025070840
#VU112475 - Missing Synchronization
CVE-2025-47999		 CWE-820 Medium
No
No
 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070840
#VU112474 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-48817		 CWE-22 High
No
No
 2008 R2 6.1.7601.27820, 2008 6.0.6003.23418, 2012 R2 6.3.9600.22676, 2012 6.2.9200.25573, 2016 10.0.14393.8246, 2019 10.0.17763.7558, 2022 23H2 10.0.22621.5472, 2022 23H2 10.0.25398.1732, 2022 10.0.20348.3932, 2025 10.0.26100.4652 08.07.2025 SB2025070839
#VU111029 - Untrusted Pointer Dereference
CVE-2025-3052		 CWE-822 Low
No
No
 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 11.06.2025 SB2025061102
#VU111026 - Improper Access Control
CVE-2025-32722		 CWE-284 Low
No
No
 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB20250610112
#VU111025 - Heap-based Buffer Overflow
CVE-2025-32713		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27769, 2008 6.0.6003.23351, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB20250610111
#VU110755 - Missing release of memory after effective lifetime
CVE-2025-29828		 CWE-401 High
No
No
 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061096
#VU110753 - Improper Privilege Management
CVE-2025-47955		 CWE-269 Low
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2008 6.0.6003.23317, 2012 R2 6.3.9600.22577, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 10.06.2025 SB2025061094
#VU110752 - Use of Uninitialized Resource
CVE-2025-33070		 CWE-908 High
No
No
 2008 R2 6.1.7601.27769, 2012 R2 6.3.9600.22620, 2012 6.2.9200.25522, 2016 10.0.14393.8148, 2019 10.0.17763.7434, 2022 23H2 10.0.25398.1665, 2022 10.0.20348.3745, 2022 10.0.20348.3807, 2025 10.0.26100.4270, 2025 10.0.26100.4349 10.06.2025 SB2025061093


Showing elements 1281 - 1300 out of 6300