Known vulnerabilities in Windows Server - page 71

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107268 - Out-of-bounds read
CVE-2025-27741		 CWE-125 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137 09.04.2025 SB2025040935
#VU107263 - Improper Access Control
CVE-2025-26678		 CWE-284 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040923
#VU107262 - Use After Free
CVE-2025-26687		 CWE-416 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040922
#VU107261 - Use After Free
CVE-2025-26681		 CWE-416 Low
Available
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040922
#VU107260 - Improper Access Control
CVE-2025-29810		 CWE-284 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040921
#VU107259 - Integer overflow
CVE-2025-26639		 CWE-190 Low
No
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040920
#VU107258 - Heap-based Buffer Overflow
CVE-2025-27478		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040919
#VU107257 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-21191		 CWE-367 Low
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040919
#VU107256 - Improper Access Control
CVE-2025-21197		 CWE-284 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040918
#VU107255 - Heap-based Buffer Overflow
CVE-2025-26666		 CWE-122 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040915
#VU107254 - Heap-based Buffer Overflow
CVE-2025-26674		 CWE-122 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040915
#VU107253 - Stack-based buffer overflow
CVE-2025-26688		 CWE-121 Low
No
No
 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040914
#VU107248 - Use After Free
CVE-2025-27491		 CWE-416 Medium
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040906
#VU107245 - Automated Recognition Mechanism with Inadequate Detection or Handling of Adversarial Input Perturbations
CVE-2025-26644		 CWE-1039 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2025 10.0.26100.3775 09.04.2025 SB2025040903
#VU107244 - Improper Authentication
CVE-2025-26635		 CWE-287 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454 09.04.2025 SB2025040903
#VU107243 - Untrusted Pointer Dereference
CVE-2025-29812		 CWE-822 Low
No
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040902
#VU107242 - Exposed Dangerous Method or Function
CVE-2025-26651		 CWE-749 Medium
No
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 09.04.2025 SB2025040901
#VU107241 - Improper Authentication
CVE-2025-27740		 CWE-287 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040898
#VU107239 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-26686		 CWE-591 Medium
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040896
#VU107237 - Untrusted Pointer Dereference
CVE-2025-27739		 CWE-822 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040895


Showing elements 1401 - 1420 out of 6300