Known vulnerabilities in Windows Server - page 69

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109068 - Use of Uninitialized Resource
CVE-2025-29958		 CWE-908 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382
#VU109067 - Out-of-bounds read
CVE-2025-29961		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382
#VU109066 - Out-of-bounds read
CVE-2025-29836		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382
#VU109065 - Out-of-bounds read
CVE-2025-29832		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382
#VU109064 - Out-of-bounds read
CVE-2025-29960		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382
#VU109063 - Use of Uninitialized Resource
CVE-2025-29959		 CWE-908 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382
#VU109062 - Use of Uninitialized Resource
CVE-2025-29830		 CWE-908 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051382
#VU109061 - Heap-based Buffer Overflow
CVE-2025-29967		 CWE-122 High
No
No
 2008 R2 6.1.7601.27729, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051381
#VU109060 - Heap-based Buffer Overflow
CVE-2025-29966		 CWE-122 High
No
No
 2008 R2 6.1.7601.27729, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051381
#VU109057 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-30394		 CWE-591 High
No
No
 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051378
#VU109056 - Resource exhaustion
CVE-2025-26677		 CWE-400 High
No
No
 2012 R2 6.3.9600.22577, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051378
#VU109055 - Improper input validation
CVE-2025-29968		 CWE-20 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692 13.05.2025 SB2025051377
#VU109054 - Use After Free
CVE-2025-29831		 CWE-416 High
No
No
 2008 R2 6.1.7601.27729, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051376
#VU109053 - Out-of-bounds read
CVE-2025-29956		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051374
#VU109052 - Improper input validation
CVE-2025-32706		 CWE-20 High
No
Exploited
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051375
#VU109051 - Use After Free
CVE-2025-32709		 CWE-416 High
No
Exploited
 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051373
#VU109050 - Use After Free
CVE-2025-30400		 CWE-416 High
Available
Exploited
 2012 R2 6.3.9600.22577, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051372
#VU109049 - Type confusion
CVE-2025-30397		 CWE-843 Critical
Available
Exploited
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051371
#VU109048 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-29833		 CWE-367 Medium
No
No
 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051370
#VU109047 - Use After Free
CVE-2025-32701		 CWE-416 High
No
Exploited
 2008 R2 6.1.7601.27729, 2008 6.0.6003.23279, 2012 R2 6.3.9600.22577, 2012 6.2.9200.25475, 2016 10.0.14393.8066, 2019 10.0.17763.7314, 2022 23H2 10.0.25398.1611, 2022 10.0.20348.3630, 2022 10.0.20348.3692, 2025 10.0.26100.3981, 2025 10.0.26100.4061 13.05.2025 SB2025051369


Showing elements 1361 - 1380 out of 6300