Known vulnerabilities in Windows Server - page 72

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107238 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-26648		 CWE-591 Low
No
No
 2008 R2 6.1.7601.27670, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040895
#VU107236 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-27492		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040894
#VU107235 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-26649		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040894
#VU107234 - Out-of-bounds read
CVE-2025-26675		 CWE-125 Low
No
No
 2012 R2 6.3.9600.22523, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040893
#VU107224 - Improper input validation
CVE-2025-26647		 CWE-20 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040882
#VU107223 - Use After Free
CVE-2025-26679		 CWE-416 Low
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040881
#VU107219 - Out-of-bounds read
CVE-2025-27728		 CWE-125 Low
No
No
 2012 R2 6.3.9600.22523, 2025 10.0.26100.3775 08.04.2025 SB2025040880
#VU107218 - Resource exhaustion
CVE-2025-27473		 CWE-400 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040879
#VU107217 - Insecure Storage of Sensitive Information
CVE-2025-29809		 CWE-922 Low
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040882
#VU107206 - Resource exhaustion
CVE-2025-27485		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107205 - Resource exhaustion
CVE-2025-26680		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107204 - Resource exhaustion
CVE-2025-26652		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107203 - Resource exhaustion
CVE-2025-27470		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107202 - Resource exhaustion
CVE-2025-27486		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107201 - Resource exhaustion
CVE-2025-21174		 CWE-400 High
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040869
#VU107200 - Use After Free
CVE-2025-27476		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2025 10.0.26100.3775 08.04.2025 SB2025040868
#VU107199 - Use After Free
CVE-2025-27467		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2025 10.0.26100.3775 08.04.2025 SB2025040868
#VU107198 - Use After Free
CVE-2025-26640		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2025 10.0.26100.3775 08.04.2025 SB2025040868
#VU107197 - Use After Free
CVE-2025-27730		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22523, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2025 10.0.26100.3775 08.04.2025 SB2025040868
#VU107196 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-21204		 CWE-59 Low
Available
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040867


Showing elements 1421 - 1440 out of 6300