Known vulnerabilities in Windows Server - page 79

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102777 - Use After Free
CVE-2025-21296		 CWE-416 Medium
No
No
 2008 R2 6.1.7601.27520, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 15.01.2025 SB2025011522
#VU102763 - Type confusion
CVE-2025-21326		 CWE-843 High
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2025 10.0.26100.2894 15.01.2025 SB2025011521
#VU102757 - Improper Authorization
CVE-2025-21275		 CWE-285 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 15.01.2025 SB2025011507
#VU102756 - Improper Access Control
CVE-2025-21202		 CWE-284 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 15.01.2025 SB2025011506
#VU102751 - Resource exhaustion
CVE-2025-21300		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114117
#VU102750 - Resource exhaustion
CVE-2025-21389		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114117
#VU102749 - Resource exhaustion
CVE-2025-21207		 CWE-400 Medium
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114116
#VU102748 - Use of Uninitialized Resource
CVE-2025-21312		 CWE-908 Low
No
No
 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091 14.01.2025 SB20250114115
#VU102747 - Exposure of sensitive information to an unauthorized actor
CVE-2025-21242		 CWE-200 Medium
No
No
 2008 R2 6.1.7601.27520, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114114
#VU102746 - Insecure Storage of Sensitive Information
CVE-2025-21299		 CWE-922 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114114
#VU102745 - Resource exhaustion
CVE-2025-21218		 CWE-400 Medium
No
No
 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7699, 2016 10.0.14393.7785, 2019 10.0.17763.6775, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114114
#VU102744 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-21274		 CWE-59 Low
No
No
 2012 R2 6.3.9600.22371, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114113
#VU102743 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-21314		 CWE-451 Medium
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114112
#VU102742 - Improper Access Control
CVE-2025-21340		 CWE-284 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114111
#VU102741 - Improper input validation
CVE-2025-21234		 CWE-20 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114110
#VU102740 - Improper input validation
CVE-2025-21235		 CWE-20 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB20250114110
#VU102738 - Resource exhaustion
CVE-2025-21330		 CWE-400 Medium
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011494
#VU102737 - Use After Free
CVE-2025-21297		 CWE-416 High
No
No
 2008 R2 6.1.7601.27520, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7699, 2016 10.0.14393.7785, 2019 10.0.17763.6775, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011494
#VU102735 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-21309		 CWE-591 High
No
No
 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7699, 2016 10.0.14393.7785, 2019 10.0.17763.6775, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011494
#VU102733 - Sensitive Data Storage in Improperly Locked Memory
CVE-2025-21224		 CWE-591 High
No
No
 2016 10.0.14393.7699, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011493


Showing elements 1561 - 1580 out of 6300