Known vulnerabilities in Windows Server - page 81

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102688 - Resource exhaustion
CVE-2025-21270		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011465
#VU102687 - Out-of-bounds read
CVE-2025-21277		 CWE-125 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011465
#VU102686 - Resource exhaustion
CVE-2025-21289		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011465
#VU102685 - Improper input validation
CVE-2025-21230		 CWE-20 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011465
#VU102684 - Resource exhaustion
CVE-2025-21290		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011465
#VU102682 - Double Free
CVE-2025-21291		 CWE-415 High
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091 14.01.2025 SB2025011464
#VU102681 - Integer overflow
CVE-2025-21382		 CWE-190 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011463
#VU102679 - Information Exposure Through Log Files
CVE-2025-21317		 CWE-532 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011461
#VU102678 - Information Exposure Through Log Files
CVE-2025-21321		 CWE-532 Low
No
No
 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011461
#VU102676 - Information Exposure Through Log Files
CVE-2025-21319		 CWE-532 Low
No
No
 2008 R2 6.1.7601.27520, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011461
#VU102675 - Information Exposure Through Log Files
CVE-2025-21323		 CWE-532 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011461
#VU102674 - Information Exposure Through Log Files
CVE-2025-21316		 CWE-532 Low
No
No
 2012 R2 6.3.9600.22371, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011461
#VU102673 - Information Exposure Through Log Files
CVE-2025-21318		 CWE-532 Low
No
No
 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011461
#VU102672 - Information Exposure Through Log Files
CVE-2025-21320		 CWE-532 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011461
#VU102671 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-21292		 CWE-94 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011459
#VU102670 - Type confusion
CVE-2025-21225		 CWE-843 Medium
No
No
 2016 10.0.14393.7699, 2016 10.0.14393.7785, 2019 10.0.17763.6775, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011458
#VU102669 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-21278		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011458
#VU102666 - Improper input validation
CVE-2025-21280		 CWE-20 Low
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011456
#VU102659 - Integer overflow
CVE-2025-21338		 CWE-190 Medium
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7699, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011451
#VU102637 - Out-of-bounds read
CVE-2025-21260		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011448


Showing elements 1601 - 1620 out of 6300