Windows Server 2003
by Microsoft
Source repositories
CVEs (5,318)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-38193 | Hig | 0.68 | 7.8 | 0.27 | KEV | Aug 13, 2024 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | |
| CVE-2024-35250 | Hig | 0.68 | 7.8 | 0.25 | KEV | Jun 11, 2024 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | |
| CVE-2023-36874 | Hig | 0.68 | 7.8 | 0.43 | KEV | Jul 11, 2023 | Windows Error Reporting Service Elevation of Privilege Vulnerability | |
| CVE-2023-29360 | Hig | 0.68 | 8.4 | 0.22 | KEV | Jun 14, 2023 | Microsoft Streaming Service Elevation of Privilege Vulnerability | |
| CVE-2022-34718 | Cri | 0.68 | 9.8 | 0.47 | Sep 13, 2022 | Windows TCP/IP Remote Code Execution Vulnerability | ||
| CVE-2022-34713 | Hig | 0.68 | 7.8 | 0.68 | KEV | Aug 9, 2022 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | |
| CVE-2020-0938 | Hig | 0.68 | 7.8 | 0.69 | KEV | Apr 15, 2020 | A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the… | |
| CVE-2020-0601 | Hig | 0.68 | 8.1 | 0.89 | KEV | Jan 14, 2020 | A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file… | |
| CVE-2019-0785 | Cri | 0.68 | 9.8 | 0.48 | Jul 15, 2019 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'. | ||
| CVE-2019-0726 | Cri | 0.68 | 9.8 | 0.52 | Apr 9, 2019 | A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698. | ||
| CVE-2013-5065 | Hig | 0.68 | 7.8 | 0.35 | KEV | Nov 28, 2013 | NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013. | |
| CVE-2011-2005 | Hig | 0.68 | 7.8 | 0.32 | KEV | Oct 12, 2011 | afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of… | |
| CVE-2024-38112 | Hig | 0.67 | 7.5 | 0.84 | KEV | Jul 9, 2024 | Windows MSHTML Platform Spoofing Vulnerability | |
| CVE-2024-30080 | Cri | 0.67 | 9.8 | 0.43 | Jun 11, 2024 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | ||
| CVE-2022-21971 | Hig | 0.67 | 7.8 | 0.54 | KEV | Feb 9, 2022 | Windows Runtime Remote Code Execution Vulnerability | |
| CVE-2014-4077 | Hig | 0.67 | 7.8 | 0.48 | KEV | Nov 11, 2014 | Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka… | |
| CVE-2009-2494 | Cri | 0.67 | 9.8 | 0.42 | Aug 12, 2009 | The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant… | ||
| CVE-2008-4835 | Cri | 0.67 | 9.8 | 0.45 | Jan 14, 2009 | SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request,… | ||
| CVE-2023-21690 | Cri | 0.66 | 9.8 | 0.28 | Feb 14, 2023 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | ||
| CVE-2023-21689 | Cri | 0.66 | 9.8 | 0.27 | Feb 14, 2023 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
- risk 0.68cvss 7.8epss 0.27
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- risk 0.68cvss 7.8epss 0.25
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- risk 0.68cvss 7.8epss 0.43
Windows Error Reporting Service Elevation of Privilege Vulnerability
- risk 0.68cvss 8.4epss 0.22
Microsoft Streaming Service Elevation of Privilege Vulnerability
- risk 0.68cvss 9.8epss 0.47
Windows TCP/IP Remote Code Execution Vulnerability
- risk 0.68cvss 7.8epss 0.68
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- risk 0.68cvss 7.8epss 0.69
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.For all systems except Windows 10, an attacker who successfully exploited the…
- risk 0.68cvss 8.1epss 0.89
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file…
- risk 0.68cvss 9.8epss 0.48
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
- risk 0.68cvss 9.8epss 0.52
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0697, CVE-2019-0698.
- risk 0.68cvss 7.8epss 0.35
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
- risk 0.68cvss 7.8epss 0.32
afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Driver Elevation of…
- risk 0.67cvss 7.5epss 0.84
Windows MSHTML Platform Spoofing Vulnerability
- risk 0.67cvss 9.8epss 0.43
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- risk 0.67cvss 7.8epss 0.54
Windows Runtime Remote Code Execution Vulnerability
- risk 0.67cvss 7.8epss 0.48
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document, aka…
- risk 0.67cvss 9.8epss 0.42
The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operations after reading a variant…
- risk 0.67cvss 9.8epss 0.45
SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request,…
- risk 0.66cvss 9.8epss 0.28
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- risk 0.66cvss 9.8epss 0.27
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Page 6 of 266