Lucene search
+L
MicrosoftWindows Server 2019

4929 matches found

CVE
CVE
added 2026/04/14 4:57 p.m.129 views

CVE-2026-32157

CVE-2026-32157 affects the Remote Desktop Client and enables remote code execution over the network. The CVSSv3.1 score is 8.8 (HIGH), with confidentiality, integrity, and availability all rated High. Attack requires network access and user interaction, with privilegesN/A and exploitation current...

8.8CVSS6AI score0.00778EPSS
Save
CVE
CVE
added 2021/01/12 7:42 p.m.128 views

CVE-2021-1676

Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.

5.5CVSS6.6AI score0.01299EPSS
Save
CVE
CVE
added 2021/01/12 7:42 p.m.128 views

CVE-2021-1680

Technical details about CVE-2021-1680 are not publicly available in the provided connected documents. Monitor for updates for affected product, root cause, impact, and remediation information.

7.8CVSS8.1AI score0.00714EPSS
Save
CVE
CVE
added 2021/01/12 7:42 p.m.128 views

CVE-2021-1695

Technical details for CVE-2021-1695 are not publicly available in the provided documents. Monitor for updates.

7.8CVSS8.1AI score0.00852EPSS
Save
CVE
CVE
added 2021/01/12 7:42 p.m.128 views

CVE-2021-1699

Technical details for CVE-2021-1699 are not provided in the supplied connected documents. Public information in the Initial document is limited to a Windows modem.sys information disclosure vulnerability. Monitor for updates.

5.5CVSS6.6AI score0.021EPSS
Save
CVE
CVE
added 2021/02/25 11:01 p.m.128 views

CVE-2021-1727

CVE-2021-1727 is a Windows Installer elevation-of-privilege vulnerability. CVSS v3.1 vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Local access with low privileges and no user interaction, impacting confidentiality, integrity, and availability. Related entries reference Micr...

7.8CVSS8.6AI score0.00756EPSS
Save
CVE
CVE
added 2021/03/11 3:40 p.m.128 views

CVE-2021-26877

Technical details for CVE-2021-26877 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here; monitor for updates from official advisories.

9.8CVSS9.7AI score0.16533EPSS
Save
CVE
CVE
added 2021/03/11 3:50 p.m.128 views

CVE-2021-27077

CVE-2021-27077 is a Windows Win32k Elevation of Privilege vulnerability in win32kfull.sys!BLTRECORD::bRotate. If the HOOK_PLGBLT flag is set, the code may read a surface object’s hdev and call DrvPlgBlt() on the referenced driver without verifying it implements the function, potentially leading t...

7.8CVSS7.7AI score0.01441EPSS
Save
CVE
CVE
added 2021/04/13 7:33 p.m.128 views

CVE-2021-28440

Technical details about CVE-2021-28440 are not publicly provided in the supplied documents. No affected products, root cause, exploit status, or remediation specifics are included here. Monitor for updates in connected sources.

7.8CVSS7.7AI score0.00616EPSS
Save
CVE
CVE
added 2021/10/13 12:27 a.m.128 views

CVE-2021-40470

CVE-2021-40470 is a DirectX Graphics Kernel Elevation of Privilege vulnerability. The initial record indicates a LOCAL, low-logging, no-interaction attack with HIGH impact via CVSSv3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8). The connected documents reference Microsoft advi...

7.8CVSS7.9AI score0.00651EPSS
Save
CVE
CVE
added 2021/11/10 12:47 a.m.128 views

CVE-2021-42288

CVE-2021-42288 is identified as Windows Hello Security Feature Bypass Vulnerability. NVD CVSS details: CVSSv3.1 base score 6.1 (PHYSICAL access, NONE privileges, UI NONE; C:H/I:H/A:N; Confidentiality/Integrity HIGH). Connected docs corroborate this CVE in Microsoft KB updates KB5007186 (OS builds...

6.1CVSS6.2AI score0.00686EPSS
Save
CVE
CVE
added 2021/12/15 2:15 p.m.128 views

CVE-2021-43222

CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...

7.5CVSS8.2AI score0.02997EPSS
Save
CVE
CVE
added 2021/12/15 2:15 p.m.128 views

CVE-2021-43230

CVE-2021-43230 is a Windows NTFS Elevation of Privilege vulnerability (local, low attack complexity) with no user interaction required, per the initial CVE entry. The connected documents primarily discuss NTFS-related CVEs in the 2021-4323x family and describe a pool/size calculation overflow in ...

7.8CVSS8.6AI score0.00557EPSS
Save
CVE
CVE
added 2022/01/11 8:22 p.m.128 views

CVE-2022-21861

Technical details about CVE-2022-21861 are not provided in the connected documents; publicly available content in the initial entry is limited to a high-level description and scores. Monitor for updates.

7.8CVSS8.1AI score0.0066EPSS
Save
CVE
CVE
added 2022/04/15 7:04 p.m.128 views

CVE-2022-26807

Technical details for CVE-2022-26807 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

7CVSS8.1AI score0.00335EPSS
Save
CVE
CVE
added 2023/05/31 6:07 p.m.128 views

CVE-2022-35745

Technical details about CVE-2022-35745 are not publicly provided in the supplied documents. Please monitor official advisories for updates on affected products, vectors, impacts, and remediation.

8.1CVSS9AI score0.01226EPSS
Save
CVE
CVE
added 2023/05/31 6:07 p.m.128 views

CVE-2022-35751

Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.

7.8CVSS8.6AI score0.05461EPSS
Save
CVE
CVE
added 2022/10/11 12:00 a.m.128 views

CVE-2022-38039

CVE-2022-38039 is referenced in associated material as a Windows kernel hive/registry bug arising from a 16-bit integer overflow when computing the length of a dynamically allocated buffer during registry hive processing. This memory corruption pattern is discussed alongside related CVEs (e.g., C...

7.8CVSS7.8AI score0.00606EPSS
Save
CVE
CVE
added 2022/11/09 12:00 a.m.128 views

CVE-2022-41101

CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...

7.8CVSS8.1AI score0.00518EPSS
Save
CVE
CVE
added 2022/12/13 12:00 a.m.128 views

CVE-2022-44674

CVE-2022-44674 is a Windows Bluetooth Driver information disclosure vulnerability. The CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, Privileges Required: Low, No user interaction, and an unchanged scope; confidentiality impact is High. Exploitation would ...

5.5CVSS6.3AI score0.00529EPSS
Save
CVE
CVE
added 2023/04/11 7:13 p.m.128 views

CVE-2023-28256

CVE-2023-28256 corresponds to a Windows DNS Server remote code execution vulnerability. The initial record identifies the affected software as Windows DNS Server and provides a CVSSv3.1 base score of 6.6 (Medium) with Network attack vector, High attack complexity, and High privileges required; us...

6.6CVSS6.8AI score0.00836EPSS
Save
CVE
CVE
added 2024/05/14 4:57 p.m.128 views

CVE-2024-30001

CVE-2024-30001 corresponds to a Windows Mobile Broadband driver vulnerability described in connected sources as enabling remote code execution by the Windows Mobile Broadband component. The NCSC advisory groups CVE-2024-30001 under Windows Mobile Broadband with an impact of executing random code ...

6.8CVSS7AI score0.00939EPSS
Save
CVE
CVE
added 2024/05/14 4:57 p.m.128 views

CVE-2024-30003

CVE-2024-30003 is a Windows vulnerability in the Windows Mobile Broadband Driver that enables remote code execution. The issue is described in the connected sources as a vulnerability that allows execution of arbitrary code (Windows Mobile Broadband) with the attacker requiring physical access (a...

6.8CVSS7.5AI score0.00932EPSS
Save
CVE
CVE
added 2024/05/14 4:57 p.m.128 views

CVE-2024-30021

CVE-2024-30021 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. Affected component: Windows Mobile Broadband (driver). Documented impact indicates potential for executing code with high confidentiality, integrity, and availability impact; CVSSv3.1 base score 6.8 (Medium) ...

6.8CVSS7AI score0.00834EPSS
Save
CVE
CVE
added 2024/07/09 5:03 p.m.128 views

CVE-2024-38047

Technical details (affected product/component, root cause, impact, and patch specifics) are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources for CVE-2024-38047.

7.8CVSS8.1AI score0.00673EPSS
Save
CVE
CVE
added 2024/08/13 5:30 p.m.128 views

CVE-2024-38185

Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.

7.8CVSS7.7AI score0.01114EPSS
Save
CVE
CVE
added 2024/10/08 5:35 p.m.128 views

CVE-2024-43517

CVE-2024-43517 is a Microsoft ActiveX Data Objects Remote Code Execution vulnerability. Documented details indicate an in-the-wild risk with network access (AV:N) and user interaction required (UI:R), with a high impact on confidentiality, integrity, and availability (C/I/A: High) and a base scor...

8.8CVSS9.1AI score0.01355EPSS
Save
CVE
CVE
added 2024/11/12 5:54 p.m.128 views

CVE-2024-43635

Technical details for CVE-2024-43635 are not publicly provided in the connected documents. The materials only reference a Windows Telephony Service RCE vulnerability. Monitor Microsoft advisories and vulnerability feeds for affected versions, impact, and remediation when they are disclosed.

8.8CVSS8.8AI score0.01601EPSS
Save
CVE
CVE
added 2025/01/14 6:03 p.m.128 views

CVE-2025-21242

CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...

5.9CVSS5.5AI score0.01646EPSS
Save
CVE
CVE
added 2025/01/14 6:03 p.m.128 views

CVE-2025-21255

Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.

6.6CVSS6.5AI score0.00834EPSS
Save
CVE
CVE
added 2025/01/14 6:04 p.m.128 views

CVE-2025-21328

CVE-2025-21328 maps to a Windows MapUrlToZone security feature bypass vulnerability. Connected docs confirm affected component and root cause: bypassing security checks in MapUrlToZone, enabling circumvention of security measures. CVSS v3.1 base metrics shown as 4.3 (MEDIUM) with Network attack v...

4.3CVSS4.6AI score0.01518EPSS
Save
CVE
CVE
added 2025/04/08 5:23 p.m.128 views

CVE-2025-24074

CVE-2025-24074 affects Microsoft Windows DWM Core Library. It is an Elevation of Privilege due to improper input validation, enabling local privilege escalation with a CVSSv3.1 base score of 7.8 (LOCAL, LOW attack complexity, NO user interaction). Impacted components include the DWM Core Library;...

7.8CVSS7.1AI score0.00568EPSS
Save
CVE
CVE
added 2025/04/08 5:23 p.m.128 views

CVE-2025-26668

CVE-2025-26668 is a heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) that allows a network-authenticated attacker to execute code remotely. Affected component is RRAS (Windows Routing and Remote Access Service); root cause is a heap-based overflow that can lead to ar...

7.5CVSS8.1AI score0.01159EPSS
Save
CVE
CVE
added 2025/04/08 5:24 p.m.128 views

CVE-2025-27739

CVE-2025-27739 is a Windows Kernel elevation-of-privilege flaw described as an untrusted pointer dereference that enables a locally authenticated attacker to obtain SYSTEM privileges (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8). Connected sources confirm this CVE is tracked under Win...

7.8CVSS7.1AI score0.00601EPSS
Save
CVE
CVE
added 2018/10/10 1:00 p.m.127 views

CVE-2018-8486

CVE-2018-8486 is an information disclosure in DirectX caused by DirectX's improper handling of memory objects. Affected are Windows 7, Windows 8.1, Windows 10 and multiple Windows Server editions (e.g., 2008/R2, 2012, 2016, 2019). Root cause: memory objects not handled safely by DirectX. Impact: ...

5.5CVSS5.8AI score0.01747EPSS
Save
CVE
CVE
added 2019/04/08 11:44 p.m.127 views

CVE-2019-0698

Summary: CVE-2019-0698 is a memory corruption vulnerability in the Windows DHCP client that can allow remote code execution when an attacker sends specially crafted DHCP responses. The connected advisories confirm related CVEs (CVE-2019-0697 and CVE-2019-0726) describe the same class of issue aff...

9.8CVSS9.5AI score0.6285EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.127 views

CVE-2019-0901

CVE-2019-0901 maps to a Windows Jet Database Engine vulnerability. Connected CNVD entries describe a buffer overflow/heap overflow in Windows Jet Database Engine when memory boundaries are not validated, potentially allowing memory corruption on affected Windows/Windows Server systems. The CNVD d...

9.3CVSS8.1AI score0.1371EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.127 views

CVE-2019-0973

CVE-2019-0973 affects the Windows Installer. The issue stems from improper input sanitization that enables insecure library loading, leading to elevation of privilege. A locally authenticated attacker could execute arbitrary code with elevated system privileges, potentially installing programs, v...

7.8CVSS7.9AI score0.01055EPSS
Save
CVE
CVE
added 2020/01/14 11:11 p.m.127 views

CVE-2020-0641

CVE-2020-0641 affects Windows Media Service and enables elevation of privilege by allowing a logged-on attacker to create a file in an arbitrary location. The vulnerability is referenced in NVD with local, low-attack complexity conditions and high impact (confidentiality, integrity, availability)...

7.8CVSS8.5AI score0.00922EPSS
Save
CVE
CVE
added 2020/02/11 9:23 p.m.127 views

CVE-2020-0703

CVE-2020-0703 affects the Windows Backup Service. It is an Elevation of Privilege vulnerability caused by improper handling of file operations. attacker must first gain execution on the victim system; the description does not provide a vendor-specific fix or version details in the provided docume...

7.8CVSS8.2AI score0.01EPSS
Save
CVE
CVE
added 2020/02/11 9:23 p.m.127 views

CVE-2020-0739

CVE-2020-0739 is an elevation-of-privilege vulnerability in Windows where dssvc.dll improperly handles file creation, enabling file overwrite/creation in secured locations. The CVE description confirms this as a Windows privilege issue, distinct from CVE-2020-0737. Connected sources provide the c...

7.8CVSS8AI score0.00788EPSS
Save
CVE
CVE
added 2020/06/09 7:43 p.m.127 views

CVE-2020-1208

CVE-2020-1208 is a remote code execution vulnerability in the Jet Database Engine when it improperly handles objects in memory. The connected updates indicate this issue is among Windows updates that address the Jet Database Engine (e.g., KB4560960) as part of multiple fixes, signaling a patch ex...

9.3CVSS8.4AI score0.14672EPSS
Save
CVE
CVE
added 2020/06/09 7:43 p.m.127 views

CVE-2020-1257

Technical details about CVE-2020-1257 are not provided in the connected documents. Public aliases, affected components, impact or fixes are not specified here; monitor for authoritative updates.

7.8CVSS8.1AI score0.00785EPSS
Save
CVE
CVE
added 2020/06/09 7:43 p.m.127 views

CVE-2020-1272

CVE-2020-1272 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer component is affected by improper input sanitization that leads to insecure library loading, enabling a locally authenticated attacker to execute arbitrary code with elevated system privileges. Exploi...

7.8CVSS8.1AI score0.0076EPSS
Save
CVE
CVE
added 2020/07/14 10:54 p.m.127 views

CVE-2020-1400

CVE-2020-1400 is a Jet Database Engine RCE in Windows: the Jet DB Engine improperly handles in-memory objects, enabling remote code execution. Exploitation requires a user to open a specially crafted file or visit a malicious website. Connected coverage notes this CVE under Jet DB Engine RCEs but...

9.3CVSS8.4AI score0.23731EPSS
Save
CVE
CVE
added 2020/07/14 10:54 p.m.127 views

CVE-2020-1468

CVE-2020-1468: Information disclosure in Windows GDI. The Windows GDI component improperly discloses memory contents, enabling partial confidentiality impact. Connected CNVD entry corroborates Windows/Windows Server information disclosure presence; no vendor/product patch details are provided in ...

6.5CVSS7.1AI score0.0518EPSS
Save
CVE
CVE
added 2020/08/17 7:13 p.m.127 views

CVE-2020-1524

CVE-2020-1524 is a Windows vulnerability affecting the Windows Speech Shell Components, where memory handling leads to elevation of privilege. The issue requires an attacker who already has code execution on the target to run a crafted application to gain higher privileges. Microsoft’s advisory i...

7.8CVSS8AI score0.00931EPSS
Save
CVE
CVE
added 2020/08/17 7:13 p.m.127 views

CVE-2020-1550

Technical details for CVE-2020-1550 are not publicly provided in the connected documents; the initial entry notes memory handling in Windows CDP User Components but no vendor/version/root-cause specifics are given here. Monitor for updates.

7.8CVSS7.9AI score0.00856EPSS
Save
CVE
CVE
added 2020/10/16 10:17 p.m.127 views

CVE-2020-16890

CVE-2020-16890 is a Windows kernel elevation-of-privilege vulnerability where the kernel mishandles objects in memory, allowing a locally authenticated attacker to run arbitrary code in kernel mode after logging on and running a crafted application. The exploit could lead to full system compromis...

7.8CVSS7.8AI score0.01EPSS
Save
CVE
CVE
added 2020/12/09 11:36 p.m.127 views

CVE-2020-16964

CVE-2020-16964 is described as a Windows Backup Engine Elevation of Privilege vulnerability. The available documents indicate a local, low-privilege attack that yields full confidentiality, integrity, and availability impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). No specific affected pr...

7.8CVSS7.8AI score0.0112EPSS
Save
Total number of security vulnerabilities4929