Known vulnerabilities in Windows Server - page 66

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 7208
Public exploits: 498
Known exploited (KEV): 273
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 7208 known vulnerabilities: 95 critical, 1384 high, 1400 medium, 4327 low Critical High Medium Low

Vulnerabilities (7208)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134476 - Use After Free
CVE-2026-45593		 CWE-416 Low
No
No
 2004 10.0.19045.7417, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061276
#VU134475 - Heap-based Buffer Overflow
CVE-2026-45636		 CWE-122 High
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061275
#VU134474 - Type confusion
CVE-2026-45600		 CWE-843 Low
No
No
 2004 10.0.19045.7417, 2025 10.0.26100.32995 12.06.2026 SB2026061273
#VU134472 - Improper Handling of Values
CVE-2026-45602		 CWE-229 High
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061272
#VU134471 - Stack-based buffer overflow
CVE-2026-44815		 CWE-121 High
No
No
 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.8655, 2025 10.0.26100.32995 12.06.2026 SB2026061271
#VU134470 - Integer overflow
CVE-2026-47291		 CWE-190 High
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061270
#VU134469 - Resource exhaustion
CVE-2026-49160		 CWE-400 Medium
No
No
 2004 10.0.19045.7417, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061270
#VU134468 - Heap-based Buffer Overflow
CVE-2026-48574		 CWE-122 High
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061259
#VU134466 - Out-of-bounds write
CVE-2026-42910		 CWE-787 Low
No
No
 2004 10.0.19045.7417, 2025 10.0.26100.32995 12.06.2026 SB2026061257
#VU134455 - Use After Free
CVE-2026-45637		 CWE-416 Low
No
No
 2004 10.0.19045.7417, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061254
#VU134454 - Type confusion
CVE-2026-45635		 CWE-843 High
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061253
#VU134453 - Use After Free
CVE-2026-45599		 CWE-416 High
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061253
#VU134452 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-45597		 CWE-362 Low
No
No
 2004 10.0.19045.7417, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061252
#VU134451 - Protection Mechanism Failure
CVE-2026-45595		 CWE-693 Medium
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061251
#VU134450 - Out-of-bounds read
CVE-2026-45604		 CWE-125 Low
No
No
 2004 10.0.19045.7417, 2025 10.0.26100.32995 12.06.2026 SB2026061250
#VU134449 - Exposure of sensitive information to an unauthorized actor
CVE-2026-45594		 CWE-200 Low
No
No
 2004 10.0.19045.7417, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061249
#VU134448 - Integer overflow
CVE-2026-45592		 CWE-190 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061248
#VU134447 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-45586		 CWE-59 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061247
#VU134446 - Exposure of sensitive information to an unauthorized actor
CVE-2026-50508		 CWE-200 Medium
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2022 10.0.20348.5256 12.06.2026 SB2026061245
#VU134445 - Untrusted Search Path
CVE-2026-47648		 CWE-426 Low
No
No
 2004 10.0.19045.7417, 2012 R2 6.3.9600.23228, 2012 6.2.9200.26132, 2016 10.0.14393.9234, 2019 10.0.17763.8880, 2022 10.0.20348.5256, 2025 10.0.26100.32995 12.06.2026 SB2026061244


Showing elements 1301 - 1320 out of 7208