Windows Server 2003
by Microsoft
Source repositories
CVEs (5,318)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-26826 | Hig | 0.47 | 7.2 | 0.04 | Apr 15, 2022 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2022-26825 | Hig | 0.47 | 7.2 | 0.03 | Apr 15, 2022 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2022-26824 | Hig | 0.47 | 7.2 | 0.03 | Apr 15, 2022 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2022-26823 | Hig | 0.47 | 7.2 | 0.03 | Apr 15, 2022 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2022-26815 | Hig | 0.47 | 7.2 | 0.04 | Apr 15, 2022 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2022-26813 | Hig | 0.47 | 7.2 | 0.04 | Apr 15, 2022 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2022-26812 | Hig | 0.47 | 7.2 | 0.04 | Apr 15, 2022 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2022-26811 | Hig | 0.47 | 7.2 | 0.03 | Apr 15, 2022 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2022-24536 | Hig | 0.47 | 7.2 | 0.04 | Apr 15, 2022 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2022-23284 | Hig | 0.47 | 7.2 | 0.03 | Mar 9, 2022 | Windows Print Spooler Elevation of Privilege Vulnerability | ||
| CVE-2022-23253 | Med | 0.47 | 6.5 | 0.56 | Mar 9, 2022 | Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability | ||
| CVE-2021-40469 | Hig | 0.47 | 7.2 | 0.08 | Oct 13, 2021 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2019-1252 | Med | 0.47 | 6.5 | 0.60 | Sep 11, 2019 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1286. | ||
| CVE-2026-70307 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-65678 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62908 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62892 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62774 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62773 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62753 | Hig | 0.46 | 7.0 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
- risk 0.47cvss 7.2epss 0.04
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.03
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.03
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.03
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.04
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.04
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.04
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.03
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.04
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.03
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.47cvss 6.5epss 0.56
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
- risk 0.47cvss 7.2epss 0.08
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.47cvss 6.5epss 0.60
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1286.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Page 142 of 266