Known vulnerabilities in Windows Server - page 84

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102617 - Heap-based Buffer Overflow
CVE-2025-21333		 CWE-122 High
Available
Exploited
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2025 10.0.26100.2894 14.01.2025 SB2025011444
#VU102616 - Use After Free
CVE-2025-21334		 CWE-416 High
No
Exploited
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2025 10.0.26100.2894 14.01.2025 SB2025011444
#VU102615 - Use After Free
CVE-2025-21335		 CWE-416 High
No
Exploited
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2025 10.0.26100.2894 14.01.2025 SB2025011444
#VU102613 - Heap-based Buffer Overflow
CVE-2025-21273		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102612 - Heap-based Buffer Overflow
CVE-2025-21252		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102611 - Heap-based Buffer Overflow
CVE-2025-21417		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102610 - Heap-based Buffer Overflow
CVE-2025-21303		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102609 - Integer overflow
CVE-2025-21243		 CWE-190 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102608 - Heap-based Buffer Overflow
CVE-2025-21306		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102607 - Heap-based Buffer Overflow
CVE-2025-21339		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102606 - Heap-based Buffer Overflow
CVE-2025-21239		 CWE-122 High
No
No
 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102605 - Heap-based Buffer Overflow
CVE-2025-21409		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU102604 - Heap-based Buffer Overflow
CVE-2025-21413		 CWE-122 High
No
No
 2008 R2 6.1.7601.27520, 2008 6.0.6003.23070, 2012 R2 6.3.9600.22371, 2012 6.2.9200.25273, 2016 10.0.14393.7785, 2022 23H2 10.0.25398.1369, 2022 10.0.20348.3091, 2025 10.0.26100.2894 14.01.2025 SB2025011445
#VU101605 - Improper Access Control
CVE-2024-49105		 CWE-284 Low
No
No
 2008 R2 6.1.7601.27467, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB20241210113
#VU101599 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49082		 CWE-22 Medium
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB20241210111
#VU101591 - Improper Authentication
CVE-2024-49076		 CWE-287 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB20241210109
#VU101588 - Incorrect Conversion between Numeric Types
CVE-2024-49093		 CWE-681 Low
No
No
 2016 10.0.14393.7606, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB20241210106
#VU101576 - Resource exhaustion
CVE-2024-49129		 CWE-400 Medium
No
No
 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2019 10.0.17763.6659, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB20241210105
#VU101554 - Heap-based Buffer Overflow
CVE-2024-49072		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB20241210103
#VU101552 - Sensitive Data Storage in Improperly Locked Memory
CVE-2024-49091		 CWE-591 Low
No
No
 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2019 10.0.17763.6659, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB20241210102


Showing elements 1661 - 1680 out of 6300