Known vulnerabilities in Windows Server - page 85

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101551 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-49107		 CWE-59 Medium
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB20241210101
#VU101550 - Return of Wrong Status Code
CVE-2024-49117		 CWE-393 Medium
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB20241210100
#VU101458 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-49124		 CWE-362 High
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121096
#VU101447 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-49084		 CWE-362 Low
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121091
#VU101446 - Out-of-bounds read
CVE-2024-49088		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966 10.12.2024 SB2024121090
#VU101445 - Untrusted Pointer Dereference
CVE-2024-49090		 CWE-822 Low
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121090
#VU101443 - Heap-based Buffer Overflow
CVE-2024-49080		 CWE-122 Medium
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121088
#VU101437 - Sensitive Data Storage in Improperly Locked Memory
CVE-2024-49095		 CWE-591 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121085
#VU101436 - Sensitive Data Storage in Improperly Locked Memory
CVE-2024-49097		 CWE-591 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121085
#VU101435 - Use After Free
CVE-2024-49126		 CWE-416 High
No
No
 2008 R2 6.1.7601.27467, 2008 6.0.6003.23016, 2012 R2 6.3.9600.22318, 2012 6.2.9200.25222, 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2022 10.0.20348.2908, 2022 10.0.20348.2966, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121084
#VU101434 - Out-of-bounds read
CVE-2024-49099		 CWE-125 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121083
#VU101433 - Out-of-bounds read
CVE-2024-49098		 CWE-125 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121083
#VU101432 - Integer underflow
CVE-2024-49103		 CWE-191 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121083
#VU101431 - Out-of-bounds read
CVE-2024-49101		 CWE-125 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121083
#VU101430 - Out-of-bounds read
CVE-2024-49109		 CWE-125 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121083
#VU101429 - Heap-based Buffer Overflow
CVE-2024-49094		 CWE-122 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121083
#VU101428 - Out-of-bounds read
CVE-2024-49111		 CWE-125 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121083
#VU101427 - Heap-based Buffer Overflow
CVE-2024-49081		 CWE-122 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121083
#VU101426 - Improper input validation
CVE-2024-49073		 CWE-20 Low
No
No
 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121082
#VU101420 - Integer underflow
CVE-2024-49077		 CWE-191 Low
No
No
 2016 10.0.14393.7606, 2022 23H2 10.0.25398.1308, 2025 10.0.26100.2528, 2025 10.0.26100.2605 10.12.2024 SB2024121082


Showing elements 1681 - 1700 out of 6300