Windows Server 2019
by Microsoft
CVEs (4,947)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-8476 | Cri | 0.69 | 9.8 | 0.62 | Nov 14, 2018 | A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows Server 2008, Windows… | ||
| CVE-2024-49138 | Hig | 0.68 | 7.8 | 0.26 | KEV | Dec 12, 2024 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
| CVE-2024-43572 | Hig | 0.68 | 7.8 | 0.67 | KEV | Oct 8, 2024 | Microsoft Management Console Remote Code Execution Vulnerability | |
| CVE-2024-38193 | Hig | 0.68 | 7.8 | 0.29 | KEV | Aug 13, 2024 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |
| CVE-2024-35250 | Hig | 0.68 | 7.8 | 0.25 | KEV | Jun 11, 2024 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | |
| CVE-2023-36874 | Hig | 0.68 | 7.8 | 0.43 | KEV | Jul 11, 2023 | Windows Error Reporting Service Elevation of Privilege Vulnerability | |
| CVE-2023-29360 | Hig | 0.68 | 8.4 | 0.22 | KEV | Jun 14, 2023 | Microsoft Streaming Service Elevation of Privilege Vulnerability | |
| CVE-2022-34718 | Cri | 0.68 | 9.8 | 0.54 | Sep 13, 2022 | Windows TCP/IP Remote Code Execution Vulnerability | ||
| CVE-2022-34713 | Hig | 0.68 | 7.8 | 0.68 | KEV | Aug 9, 2022 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | |
| CVE-2020-0938 | Hig | 0.68 | 7.8 | 0.69 | KEV | Apr 15, 2020 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the… | |
| CVE-2020-0601 | Hig | 0.68 | 8.1 | 0.89 | KEV | Jan 14, 2020 | A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file… | |
| CVE-2019-0785 | Cri | 0.68 | 9.8 | 0.48 | Jul 15, 2019 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'. | ||
| CVE-2019-0726 | Cri | 0.68 | 9.8 | 0.52 | Apr 9, 2019 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698. | ||
| CVE-2024-38112 | Hig | 0.67 | 7.5 | 0.84 | KEV | Jul 9, 2024 | Windows MSHTML Platform Spoofing Vulnerability | |
| CVE-2024-30080 | Cri | 0.67 | 9.8 | 0.43 | Jun 11, 2024 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | ||
| CVE-2022-21971 | Hig | 0.67 | 7.8 | 0.54 | KEV | Feb 9, 2022 | Windows Runtime Remote Code Execution Vulnerability | |
| CVE-2021-28476 | Cri | 0.67 | 9.9 | 0.39 | May 11, 2021 | Windows Hyper-V Remote Code Execution Vulnerability | ||
| CVE-2023-21690 | Cri | 0.66 | 9.8 | 0.28 | Feb 14, 2023 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | ||
| CVE-2023-21689 | Cri | 0.66 | 9.8 | 0.27 | Feb 14, 2023 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | ||
| CVE-2022-24497 | Cri | 0.66 | 9.8 | 0.35 | Apr 15, 2022 | Windows Network File System Remote Code Execution Vulnerability |
- risk 0.69cvss 9.8epss 0.62
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows Server 2008, Windows…
- risk 0.68cvss 7.8epss 0.26
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.68cvss 7.8epss 0.67
Microsoft Management Console Remote Code Execution Vulnerability
- risk 0.68cvss 7.8epss 0.29
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- risk 0.68cvss 7.8epss 0.25
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- risk 0.68cvss 7.8epss 0.43
Windows Error Reporting Service Elevation of Privilege Vulnerability
- risk 0.68cvss 8.4epss 0.22
Microsoft Streaming Service Elevation of Privilege Vulnerability
- risk 0.68cvss 9.8epss 0.54
Windows TCP/IP Remote Code Execution Vulnerability
- risk 0.68cvss 7.8epss 0.68
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- risk 0.68cvss 7.8epss 0.69
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the…
- risk 0.68cvss 8.1epss 0.89
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file…
- risk 0.68cvss 9.8epss 0.48
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
- risk 0.68cvss 9.8epss 0.52
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.
- risk 0.67cvss 7.5epss 0.84
Windows MSHTML Platform Spoofing Vulnerability
- risk 0.67cvss 9.8epss 0.43
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- risk 0.67cvss 7.8epss 0.54
Windows Runtime Remote Code Execution Vulnerability
- risk 0.67cvss 9.9epss 0.39
Windows Hyper-V Remote Code Execution Vulnerability
- risk 0.66cvss 9.8epss 0.28
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- risk 0.66cvss 9.8epss 0.27
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- risk 0.66cvss 9.8epss 0.35
Windows Network File System Remote Code Execution Vulnerability
Page 5 of 248