Known vulnerabilities in Windows Server - page 88

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100384 - Protection Mechanism Failure
CVE-2024-38203		 CWE-693 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112143
#VU100382 - Sensitive Data Storage in Improperly Locked Memory
CVE-2024-38264		 CWE-591 Medium
No
No
 2022 23H2 10.0.25398.1251, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112141
#VU100381 - Improper Authentication
CVE-2024-49019		 CWE-287 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2016 10.0.14393.7515, 2019 10.0.17763.6532, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112140
#VU100370 - Untrusted Pointer Dereference
CVE-2024-43629		 CWE-822 Low
No
No
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112137
#VU100368 - Double Free
CVE-2024-43447		 CWE-415 High
No
No
 2022 10.0.20348.2849 12.11.2024 SB20241112135
#VU100367 - Stack-based buffer overflow
CVE-2024-43630		 CWE-121 Low
No
No
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112134
#VU100366 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-49046		 CWE-367 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112133
#VU100348 - Untrusted Pointer Dereference
CVE-2024-43636		 CWE-822 Low
No
No
 2012 R2 6.3.9600.22267, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112123
#VU100332 - Untrusted Pointer Dereference
CVE-2024-43646		 CWE-822 Low
No
No
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112122
#VU100331 - Untrusted Pointer Dereference
CVE-2024-43631		 CWE-822 Low
No
No
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112122
#VU100309 - Out-of-bounds read
CVE-2024-43638		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112113
#VU100308 - Out-of-bounds read
CVE-2024-43449		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27415, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112113
#VU100307 - Out-of-bounds read
CVE-2024-43637		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112113
#VU100306 - Out-of-bounds read
CVE-2024-43643		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112113
#VU100305 - Out-of-bounds read
CVE-2024-43634		 CWE-125 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112113
#VU100304 - Untrusted Pointer Dereference
CVE-2024-43624		 CWE-822 Medium
No
No
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112112
#VU100276 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43451		 CWE-200 High
No
Exploited
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112106
#VU100270 - Improper Authentication
CVE-2024-49039		 CWE-287 High
Available
Exploited
 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849, 2025 10.0.26100.2240, 2025 10.0.26100.2314 12.11.2024 SB20241112105
#VU100269 - Improper Access Control
CVE-2024-43530		 CWE-284 Low
No
No
 2022 10.0.20348.2849 12.11.2024 SB20241112103
#VU100262 - Heap-based Buffer Overflow
CVE-2024-43626		 CWE-122 Low
No
No
 2008 R2 6.1.7601.27415, 2008 6.0.6003.22966, 2012 R2 6.3.9600.22267, 2012 6.2.9200.25165, 2022 23H2 10.0.25398.1251, 2022 10.0.20348.2849 12.11.2024 SB20241112102


Showing elements 1741 - 1760 out of 6300