Known vulnerabilities in Windows Server - page 74

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107167 - Heap-based Buffer Overflow
CVE-2025-21221		 CWE-122 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107166 - Heap-based Buffer Overflow
CVE-2025-21222		 CWE-122 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107165 - Heap-based Buffer Overflow
CVE-2025-21205		 CWE-122 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107164 - Heap-based Buffer Overflow
CVE-2025-27477		 CWE-122 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107163 - Stack-based buffer overflow
CVE-2025-27481		 CWE-121 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040854
#VU107162 - Exposure of sensitive information to an unauthorized actor
CVE-2025-27736		 CWE-200 Low
No
No
 2012 R2 6.3.9600.22523, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040853
#VU107161 - Resource exhaustion
CVE-2025-26641		 CWE-400 High
No
No
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040852
#VU107159 - Use After Free
CVE-2025-29824		 CWE-416 High
Available
Exploited
 2008 R2 6.1.7601.27670, 2008 6.0.6003.23220, 2012 R2 6.3.9600.22523, 2012 6.2.9200.25423, 2016 10.0.14393.7970, 2019 10.0.17763.7137, 2022 23H2 10.0.25398.1551, 2022 10.0.20348.3454, 2025 10.0.26100.3775 08.04.2025 SB2025040850
#VU105851 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-9491		 CWE-451 High
Available
Exploited
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 18.03.2025 SB2025031863
#VU105569 - Improper Access Control
CVE-2024-9157		 CWE-284 Low
No
No
 2008 R2 6.1.7601.27618, 2008 6.0.6003.23168, 2012 R2 6.3.9600.22470, 2012 6.2.9200.25368, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB20250311102
#VU105565 - Exposure of sensitive information to an unauthorized actor
CVE-2025-24071		 CWE-200 High
Available
No
 2012 R2 6.3.9600.22470, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB2025031198
#VU105564 - Use After Free
CVE-2025-24044		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22470, 2012 6.2.9200.25368, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB2025031197
#VU105560 - Use After Free
CVE-2025-24072		 CWE-416 Low
No
No
 2008 R2 6.1.7601.27618, 2008 6.0.6003.23168, 2012 R2 6.3.9600.22470, 2012 6.2.9200.25368, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB2025031195
#VU105559 - Protection Mechanism Failure
CVE-2025-24061		 CWE-693 High
No
No
 2012 R2 6.3.9600.22470, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB2025031194
#VU105558 - Improper Resolution of Path Equivalence
CVE-2025-21247		 CWE-41 Low
Available
No
 2008 R2 6.1.7601.27618, 2008 6.0.6003.23168, 2012 R2 6.3.9600.22470, 2012 6.2.9200.25368, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB2025031193
#VU105557 - External Control of File Name or Path
CVE-2025-24996		 CWE-73 Medium
No
No
 2008 R2 6.1.7601.27618, 2012 R2 6.3.9600.22470, 2012 6.2.9200.25368, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB2025031192
#VU105556 - External Control of File Name or Path
CVE-2025-24054		 CWE-73 Medium
Available
Exploited
 2008 R2 6.1.7601.27618, 2012 R2 6.3.9600.22470, 2012 6.2.9200.25368, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB2025031192
#VU105555 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-25008		 CWE-59 Low
No
No
 2012 R2 6.3.9600.22470, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3328, 2025 10.0.26100.3476 11.03.2025 SB2025031191
#VU105546 - Heap-based Buffer Overflow
CVE-2025-24066		 CWE-122 Low
No
No
 2012 R2 6.3.9600.22470, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB2025031181
#VU105544 - Heap-based Buffer Overflow
CVE-2025-24067		 CWE-122 Low
No
No
 2012 R2 6.3.9600.22470, 2016 10.0.14393.7876, 2019 10.0.17763.7009, 2022 23H2 10.0.25398.1486, 2022 10.0.20348.3270, 2022 10.0.20348.3328, 2025 10.0.26100.3403, 2025 10.0.26100.3476 11.03.2025 SB2025031181


Showing elements 1461 - 1480 out of 6300