Known vulnerabilities in Windows Server - page 91

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 6300
Public exploits: 488
Known exploited (KEV): 268
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 6300 known vulnerabilities: 95 critical, 1270 high, 1244 medium, 3689 low Critical High Medium Low

Vulnerabilities (6300)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98223 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-43551		 CWE-59 Low
No
No
 2012 R2 6.3.9600.22221, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100893
#VU98222 - Out-of-bounds read
CVE-2024-43565		 CWE-125 Medium
No
No
 2012 R2 6.3.9600.22221, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100892
#VU98221 - Out-of-bounds read
CVE-2024-43562		 CWE-125 Medium
No
No
 2012 R2 6.3.9600.22221, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100892
#VU98220 - Improper Authentication
CVE-2024-38124		 CWE-287 Medium
No
No
 2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100891
#VU98219 - Not Failing Securely (\'Failing Open\')
CVE-2024-43532		 CWE-636 High
Available
No
 2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100890
#VU98216 - Resource exhaustion
CVE-2024-43515		 CWE-400 Medium
No
No
 2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100887
#VU98214 - Untrusted Pointer Dereference
CVE-2024-43516		 CWE-822 Low
No
No
 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100885
#VU98213 - Heap-based Buffer Overflow
CVE-2024-43528		 CWE-122 Low
No
No
 2012 R2 6.3.9600.22221, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100885
#VU98212 - Heap-based Buffer Overflow
CVE-2024-43518		 CWE-122 High
No
No
 2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100884
#VU98202 - Double Free
CVE-2024-43514		 CWE-415 Low
No
No
 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100880
#VU98201 - Out-of-bounds read
CVE-2024-43500		 CWE-125 Low
No
No
 2022 23H2 10.0.25398.1189 08.10.2024 SB2024100880
#VU98199 - Incorrect Check of Function Return Value
CVE-2024-43521		 CWE-253 Medium
No
No
 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98198 - Allocation of Resources Without Limits or Throttling
CVE-2024-43567		 CWE-770 Medium
No
No
 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98197 - Improper input validation
CVE-2024-20659		 CWE-20 Low
No
No
 2012 R2 6.3.9600.22221, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98196 - Improper input validation
CVE-2024-30092		 CWE-20 Medium
No
No
 2012 R2 6.3.9600.22221, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98195 - Resource exhaustion
CVE-2024-43575		 CWE-400 Medium
No
No
 2012 R2 6.3.9600.22221, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100874
#VU98194 - Missing Required Cryptographic Step
CVE-2024-43547		 CWE-325 Medium
No
No
 2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100868
#VU98192 - Improper Authorization
CVE-2024-38129		 CWE-285 Medium
No
No
 2022 23H2 10.0.25398.1189 08.10.2024 SB2024100868
#VU98191 - Improper input validation
CVE-2024-38265		 CWE-20 High
No
No
 2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867
#VU98180 - Stack-based buffer overflow
CVE-2024-43549		 CWE-121 High
No
No
 2008 R2 6.1.7601.27366, 2008 6.0.6003.22918, 2012 R2 6.3.9600.22221, 2012 6.2.9200.25118, 2016 10.0.14393.7428, 2019 10.0.17763.6414, 2022 23H2 10.0.25398.1189, 2022 10.0.20348.2762 08.10.2024 SB2024100867


Showing elements 1801 - 1820 out of 6300