Windows Server 2003
by Microsoft
Source repositories
CVEs (5,318)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-33824 | Cri | 0.76 | 9.8 | 0.02 | KEV | Apr 14, 2026 | Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network. | |
| CVE-2024-49039 | Hig | 0.76 | 8.8 | 0.14 | KEV | Nov 12, 2024 | Windows Task Scheduler Elevation of Privilege Vulnerability | |
| CVE-2024-21338 | Hig | 0.76 | 7.8 | 0.60 | KEV | Feb 13, 2024 | Windows Kernel Elevation of Privilege Vulnerability | |
| CVE-2023-36025 | Hig | 0.76 | 8.8 | 0.88 | KEV | Nov 14, 2023 | Windows SmartScreen Security Feature Bypass Vulnerability | |
| CVE-2023-28252 | Hig | 0.76 | 7.8 | 0.49 | KEV | Apr 11, 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
| CVE-2015-1701 | Hig | 0.76 | 7.8 | 0.56 | KEV | Apr 21, 2015 | Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability." | |
| CVE-2023-36884 | Hig | 0.75 | 7.5 | 0.99 | KEV | Jul 11, 2023 | Windows Search Remote Code Execution Vulnerability | |
| CVE-2022-21999 | Hig | 0.75 | 7.8 | 0.41 | KEV | Feb 9, 2022 | Windows Print Spooler Elevation of Privilege Vulnerability | |
| CVE-2020-0787 | Hig | 0.75 | 7.8 | 0.43 | KEV | Mar 12, 2020 | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'. | |
| CVE-2019-0841 | Hig | 0.75 | 7.8 | 0.41 | KEV | Apr 9, 2019 | An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836. | |
| CVE-2019-0803 | Hig | 0.75 | 7.8 | 0.45 | KEV | Apr 9, 2019 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859. | |
| CVE-2018-8414 | Hig | 0.75 | 8.8 | 0.73 | KEV | Aug 15, 2018 | A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10. | |
| CVE-2023-21554 | Cri | 0.74 | 9.8 | 0.95 | Apr 11, 2023 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | ||
| CVE-2022-21907 | Cri | 0.74 | 9.8 | 0.93 | Jan 11, 2022 | HTTP Protocol Stack Remote Code Execution Vulnerability | ||
| CVE-2020-1020 | Hig | 0.74 | 8.8 | 0.65 | KEV | Apr 15, 2020 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the… | |
| CVE-2019-1405 | Hig | 0.74 | 7.8 | 0.30 | KEV | Nov 12, 2019 | An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. | |
| CVE-2014-4148 | Hig | 0.74 | 8.8 | 0.60 | KEV | Oct 15, 2014 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary… | |
| CVE-2024-43461 | Hig | 0.73 | 8.8 | 0.54 | KEV | Sep 10, 2024 | Windows MSHTML Platform Spoofing Vulnerability | |
| CVE-2024-29988 | Hig | 0.73 | 8.8 | 0.45 | KEV | Apr 9, 2024 | SmartScreen Prompt Security Feature Bypass Vulnerability | |
| CVE-2023-21674 | Hig | 0.73 | 8.8 | 0.41 | KEV | Jan 10, 2023 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
- risk 0.76cvss 9.8epss 0.02
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- risk 0.76cvss 8.8epss 0.14
Windows Task Scheduler Elevation of Privilege Vulnerability
- risk 0.76cvss 7.8epss 0.60
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.76cvss 8.8epss 0.88
Windows SmartScreen Security Feature Bypass Vulnerability
- risk 0.76cvss 7.8epss 0.49
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.76cvss 7.8epss 0.56
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."
- risk 0.75cvss 7.5epss 0.99
Windows Search Remote Code Execution Vulnerability
- risk 0.75cvss 7.8epss 0.41
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.75cvss 7.8epss 0.43
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
- risk 0.75cvss 7.8epss 0.41
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.
- risk 0.75cvss 7.8epss 0.45
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685, CVE-2019-0859.
- risk 0.75cvss 8.8epss 0.73
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
- risk 0.74cvss 9.8epss 0.95
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- risk 0.74cvss 9.8epss 0.93
HTTP Protocol Stack Remote Code Execution Vulnerability
- risk 0.74cvss 8.8epss 0.65
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the…
- risk 0.74cvss 7.8epss 0.30
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.
- risk 0.74cvss 8.8epss 0.60
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary…
- risk 0.73cvss 8.8epss 0.54
Windows MSHTML Platform Spoofing Vulnerability
- risk 0.73cvss 8.8epss 0.45
SmartScreen Prompt Security Feature Bypass Vulnerability
- risk 0.73cvss 8.8epss 0.41
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Page 2 of 266