Windows Server 2003
by Microsoft
Source repositories
CVEs (4,742)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-26672 | Med | 0.42 | 6.5 | 0.02 | Apr 8, 2025 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2025-26667 | Med | 0.42 | 6.5 | 0.02 | Apr 8, 2025 | Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2025-26664 | Med | 0.42 | 6.5 | 0.02 | Apr 8, 2025 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2025-26651 | Med | 0.42 | 6.5 | 0.02 | Apr 8, 2025 | Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network. | ||
| CVE-2025-26635 | Med | 0.42 | 6.5 | 0.01 | Apr 8, 2025 | Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network. | ||
| CVE-2025-21203 | Med | 0.42 | 6.5 | 0.01 | Apr 8, 2025 | Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2025-21197 | Med | 0.42 | 6.5 | 0.03 | Apr 8, 2025 | Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content. | ||
| CVE-2025-24996 | Med | 0.42 | 6.5 | 0.01 | Mar 11, 2025 | External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. | ||
| CVE-2025-24984 | Med | 0.42 | 4.6 | 0.02 | KEV | Mar 11, 2025 | Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. | |
| CVE-2025-21352 | Med | 0.42 | 6.5 | 0.01 | Feb 11, 2025 | Internet Connection Sharing (ICS) Denial of Service Vulnerability | ||
| CVE-2025-21254 | Med | 0.42 | 6.5 | 0.01 | Feb 11, 2025 | Internet Connection Sharing (ICS) Denial of Service Vulnerability | ||
| CVE-2025-21216 | Med | 0.42 | 6.5 | 0.01 | Feb 11, 2025 | Internet Connection Sharing (ICS) Denial of Service Vulnerability | ||
| CVE-2025-21212 | Med | 0.42 | 6.5 | 0.01 | Feb 11, 2025 | Internet Connection Sharing (ICS) Denial of Service Vulnerability | ||
| CVE-2025-21314 | Med | 0.42 | 6.5 | 0.01 | Jan 14, 2025 | Windows SmartScreen Spoofing Vulnerability | ||
| CVE-2025-21308 | Med | 0.42 | 6.5 | 0.02 | Jan 14, 2025 | Windows Themes Spoofing Vulnerability | ||
| CVE-2025-21301 | Med | 0.42 | 6.5 | 0.02 | Jan 14, 2025 | Windows Geolocation Service Information Disclosure Vulnerability | ||
| CVE-2025-21288 | Med | 0.42 | 6.5 | 0.01 | Jan 14, 2025 | Windows COM Server Information Disclosure Vulnerability | ||
| CVE-2025-21272 | Med | 0.42 | 6.5 | 0.01 | Jan 14, 2025 | Windows COM Server Information Disclosure Vulnerability | ||
| CVE-2025-21217 | Med | 0.42 | 6.5 | 0.02 | Jan 14, 2025 | Windows NTLM Spoofing Vulnerability | ||
| CVE-2025-21193 | Med | 0.42 | 6.5 | 0.01 | Jan 14, 2025 | Active Directory Federation Server Spoofing Vulnerability |
- risk 0.42cvss 6.5epss 0.02
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.02
Exposure of sensitive information to an unauthorized actor in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.02
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.02
Exposed dangerous method or function in Windows Local Session Manager (LSM) allows an authorized attacker to deny service over a network.
- risk 0.42cvss 6.5epss 0.01
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.
- risk 0.42cvss 6.5epss 0.01
Buffer over-read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.03
Improper access control in Windows NTFS allows an authorized attacker to disclose file path information under a folder where the attacker doesn't have permission to list content.
- risk 0.42cvss 6.5epss 0.01
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- risk 0.42cvss 4.6epss 0.02
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
- risk 0.42cvss 6.5epss 0.01
Internet Connection Sharing (ICS) Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.01
Internet Connection Sharing (ICS) Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.01
Internet Connection Sharing (ICS) Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.01
Internet Connection Sharing (ICS) Denial of Service Vulnerability
- risk 0.42cvss 6.5epss 0.01
Windows SmartScreen Spoofing Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Themes Spoofing Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows Geolocation Service Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.01
Windows COM Server Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.01
Windows COM Server Information Disclosure Vulnerability
- risk 0.42cvss 6.5epss 0.02
Windows NTLM Spoofing Vulnerability
- risk 0.42cvss 6.5epss 0.01
Active Directory Federation Server Spoofing Vulnerability
Page 159 of 238