Known vulnerabilities in Windows Server - page 92

Vendor: Microsoft
Software: Windows Server
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118277 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59506		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111150
#VU118276 - Use After Free
CVE-2025-60716		 CWE-416 Low
No
No
 2008 R2 6.1.7601.28021, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111150
#VU118275 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-60723		 CWE-362 Medium
No
No
 2008 R2 6.1.7601.28021, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111150
#VU118274 - Heap-based Buffer Overflow
CVE-2025-60724		 CWE-122 High
No
No
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 11.11.2025 SB2025111149
#VU117285 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-55696		 CWE-367 Low
No
No
 2012 R2 6.3.9600.22824, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB20251015133
#VU117278 - Cleartext Transmission of Sensitive Information
CVE-2025-53139		 CWE-319 Low
No
No
 2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 15.10.2025 SB20251015126
#VU117235 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59284		 CWE-200 Medium
Available
No
 2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 15.10.2025 SB2025101592
#VU117233 - Use of a Key Past its Expiration Date
CVE-2025-48813		 CWE-324 Low
No
No
 2012 R2 6.3.9600.22824, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101590
#VU117230 - Buffer over-read
CVE-2025-59192		 CWE-126 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101587
#VU117229 - NULL Pointer Dereference
CVE-2025-55698		 CWE-476 Medium
No
No
 2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 15.10.2025 SB2025101586
#VU117228 - Use After Free
CVE-2025-55678		 CWE-416 Low
No
No
 2008 R2 6.1.7601.27974, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101586
#VU117225 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59282		 CWE-362 Medium
No
No
 2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101584
#VU117224 - Use After Free
CVE-2025-59202		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101583
#VU117223 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59200		 CWE-362 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101582
#VU117222 - Deserialization of Untrusted Data
CVE-2025-59287		 CWE-502 Critical
Available
Exploited
 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101581
#VU117221 - Improper Authentication
CVE-2025-55340		 CWE-287 Low
No
No
 2012 R2 6.3.9600.22824, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101580
#VU117218 - Use After Free
CVE-2025-59210		 CWE-416 Low
No
No
 2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 15.10.2025 SB2025101577
#VU117212 - Information Exposure Through Log Files
CVE-2025-59203		 CWE-532 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101571
#VU117206 - Information Exposure Through Log Files
CVE-2025-59197		 CWE-532 Low
No
No
 2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 15.10.2025 SB2025101564
#VU117204 - Resource exhaustion
CVE-2025-59502		 CWE-400 Medium
No
No
 2012 R2 6.3.9600.22824, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 15.10.2025 SB2025101562


Showing elements 1821 - 1840 out of 8285