Known vulnerabilities in Windows Server - page 98

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 8285
Public exploits: 499
Known exploited (KEV): 274

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Windows Server Windows Server is affected by 8285 known vulnerabilities: 96 critical, 1510 high, 1532 medium, 5147 low Critical High Medium Low

Vulnerabilities (8285)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117017 - Use After Free
CVE-2025-55691
CWE-416 Low
No
No
2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117016 - Use After Free
CVE-2025-55690
CWE-416 Low
No
No
2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117015 - Use After Free
CVE-2025-55688
CWE-416 Low
No
No
2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117014 - Use After Free
CVE-2025-55684
CWE-416 Low
No
No
2012 R2 6.3.9600.22824, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117013 - Use After Free
CVE-2025-55331
CWE-416 Low
No
No
2012 R2 6.3.9600.22824, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117012 - Use After Free
CVE-2025-55689
CWE-416 Low
No
No
2012 R2 6.3.9600.22824, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117011 - Use After Free
CVE-2025-55686
CWE-416 Low
No
No
2012 R2 6.3.9600.22824, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117010 - Use After Free
CVE-2025-55685
CWE-416 Low
No
No
2012 R2 6.3.9600.22824, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101461
#VU117009 - Out-of-bounds read
CVE-2025-55681
CWE-125 Low
No
No
2012 R2 6.3.9600.22824, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101460
#VU117008 - Improper Access Control
CVE-2025-59230
CWE-284 High
No
Exploited
2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101459
#VU117007 - Untrusted Pointer Dereference
CVE-2025-24990
CWE-822 High
Available
Exploited
2008 R2 6.1.7601.27974, 2008 6.0.6003.23571, 2012 R2 6.3.9600.22824, 2012 6.2.9200.25722, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101458
#VU117006 - Heap-based Buffer Overflow
CVE-2025-59254
CWE-122 Low
No
No
2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101457
#VU117005 - Heap-based Buffer Overflow
CVE-2025-58722
CWE-122 Low
No
No
2012 R2 6.3.9600.22824, 2016 10.0.14393.8519, 2019 10.0.17763.7919, 2022 23H2 10.0.25398.1913, 2022 10.0.20348.4294, 2025 10.0.26100.6899 14.10.2025 SB2025101457
#VU115962 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59220
CWE-362 Low
No
No
2012 R2 6.3.9600.22774, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 19.09.2025 SB20250919142
#VU115961 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-59216
CWE-362 Low
No
No
2012 R2 6.3.9600.22774, 2025 10.0.26100.6508, 2025 10.0.26100.6584 19.09.2025 SB20250919141
#VU115959 - Use After Free
CVE-2025-59215
CWE-416 Low
No
No
2012 R2 6.3.9600.22774, 2025 10.0.26100.6508, 2025 10.0.26100.6584 19.09.2025 SB20250919139
#VU115130 - Heap-based Buffer Overflow
CVE-2025-54894
CWE-122 Low
No
No
2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091017
#VU115129 - Integer overflow
CVE-2025-54110
CWE-190 Low
Available
No
2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091016
#VU115128 - Stack-based buffer overflow
CVE-2025-54099
CWE-121 Low
No
No
2008 R2 6.1.7601.27929, 2008 6.0.6003.23529, 2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091015
#VU115127 - Exposure of sensitive information to an unauthorized actor
CVE-2025-53804
CWE-200 Low
No
No
2012 R2 6.3.9600.22774, 2012 6.2.9200.25675, 2016 10.0.14393.8422, 2019 10.0.17763.7792, 2022 23H2 10.0.25398.1849, 2022 10.0.20348.4106, 2022 10.0.20348.4171, 2025 10.0.26100.6508, 2025 10.0.26100.6584 10.09.2025 SB2025091014


Showing elements 1941 - 1960 out of 8285