Known vulnerabilities in Windows Server - page 74

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131208 - Double Free
CVE-2026-32170		 CWE-415 Medium
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5139, 2025 10.0.26100.32772, 2025 10.0.26100.32860 12.05.2026 SB2026051299
#VU131207 - Double Free
CVE-2026-21530		 CWE-415 Medium
No
No
 2012 R2 6.3.9600.23181, 2012 6.2.9200.26079, 2016 10.0.14393.9140, 2019 10.0.17763.8755, 2022 23H2 10.0.25398.2330, 2022 10.0.20348.5139, 2025 10.0.26100.32860 12.05.2026 SB2026051299
#VU126306 - Missing Required Cryptographic Step
CVE-2026-25250		 CWE-325 Low
Available
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 16.04.2026 SB2026041622
#VU126261 - Memory corruption
CVE-2023-20585		 CWE-119 Low
No
No
 2012 R2 6.3.9600.23132, 2025 10.0.26100.32690 16.04.2026 SB2026041617
SB2026052679
SB2026053002
and 13 more
#VU126224 - Use After Free
CVE-2026-32070		 CWE-416 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415145
#VU126223 - Improper input validation
CVE-2026-27913		 CWE-20 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020 15.04.2026 SB20260415144
#VU126222 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-27910		 CWE-280 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415143
#VU126221 - Exposure of sensitive information to an unauthorized actor
CVE-2026-32081		 CWE-200 Low
No
No
 2012 R2 6.3.9600.23132, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415142
#VU126220 - Insufficient UI Warning of Dangerous Operations
CVE-2026-26151		 CWE-357 High
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415141
#VU126219 - Double Free
CVE-2026-33824		 CWE-415 High
Available
Exploited
 2012 R2 6.3.9600.23132, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415140
#VU126218 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-33827		 CWE-362 High
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415139
#VU126217 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-33104		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23132, 2012 6.2.9200.26026, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415138
#VU126215 - Improper Authentication
CVE-2026-32072		 CWE-287 Low
No
No
 2012 R2 6.3.9600.23132, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415136
#VU126212 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-32162		 CWE-349 Low
No
No
 2012 R2 6.3.9600.23132, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415133
#VU126210 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-32088		 CWE-362 Low
No
No
 2012 R2 6.3.9600.23132, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415131
#VU126209 - Improper input validation
CVE-2026-33826		 CWE-20 Medium
No
No
 2012 R2 6.3.9600.23132, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 23H2 10.0.25398.2274, 2022 10.0.20348.5020, 2025 10.0.26100.32690 15.04.2026 SB20260415130
#VU126207 - Untrusted Pointer Dereference
CVE-2026-32222		 CWE-822 Low
No
No
 2012 R2 6.3.9600.23132, 2025 10.0.26100.32690 15.04.2026 SB20260415128
#VU126206 - Heap-based Buffer Overflow
CVE-2026-32221		 CWE-122 High
No
No
 2012 R2 6.3.9600.23132, 2025 10.0.26100.32690 15.04.2026 SB20260415127
#VU126186 - Improper Access Control
CVE-2026-32220		 CWE-284 Low
No
No
 2012 R2 6.3.9600.23132, 2025 10.0.26100.32690 15.04.2026 SB20260415123
#VU126185 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-0390		 CWE-807 Low
No
No
 2012 R2 6.3.9600.23132, 2016 10.0.14393.9060, 2019 10.0.17763.8644, 2022 10.0.20348.5020 15.04.2026 SB20260415123


Showing elements 1461 - 1480 out of 8285