Windows Server 2019@- Security Vulnerabilities and Issues — Page 21 of Windows Server 2019@- CVE List

Lucene search

MicrosoftWindows Server 2019-

2708 matches found

CVE•added 2019/04/09 9:29 p.m.•127 views

CVE-2019-0793

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0790, CVE-2019-0791, CVE-2019-0792, CVE-2019-0795.

9.3CVSS8.8AI score0.28171EPSS

CVE•added 2019/06/12 2:29 p.m.•127 views

CVE-2019-0948

An information disclosure vulnerability exists in the Windows Event Viewer (eventvwr.msc) when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declarati...

5.5CVSS6AI score0.42662EPSS

CVE•added 2019/06/12 2:29 p.m.•127 views

CVE-2019-1021

An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges.To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability. This vulner...

7.8CVSS8.2AI score0.00299EPSS

CVE•added 2019/07/29 1:57 p.m.•127 views

CVE-2019-1102

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.

9.3CVSS8.1AI score0.24741EPSS

CVE•added 2019/12/10 10:15 p.m.•127 views

CVE-2019-1468

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.20489EPSS

CVE•added 2020/10/16 11:15 p.m.•127 views

CVE-2020-16907

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or dele...

7.8CVSS7.8AI score0.00744EPSS

CVE•added 2021/01/12 8:15 p.m.•127 views

CVE-2021-1666

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01239EPSS

CVE•added 2021/07/14 6:15 p.m.•127 views

CVE-2021-33780

Windows DNS Server Remote Code Execution Vulnerability

8.8CVSS8.3AI score0.01469EPSS

CVE•added 2022/01/11 9:15 p.m.•127 views

CVE-2022-21888

Windows Modern Execution Server Remote Code Execution Vulnerability

9.3CVSS8.8AI score0.02829EPSS

CVE•added 2022/01/11 9:15 p.m.•127 views

CVE-2022-21900

Windows Hyper-V Security Feature Bypass Vulnerability

4.6CVSS6.7AI score0.00274EPSS

CVE•added 2023/03/14 5:15 p.m.•127 views

CVE-2023-24913

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

8.8CVSS8.8AI score0.03462EPSS

CVE•added 2023/04/11 9:15 p.m.•127 views

CVE-2023-28271

Windows Kernel Memory Information Disclosure Vulnerability

5.5CVSS5.5AI score0.00321EPSS

CVE•added 2023/04/11 9:15 p.m.•127 views

CVE-2023-28308

Windows DNS Server Remote Code Execution Vulnerability

6.6CVSS6.8AI score0.00235EPSS

CVE•added 2023/06/14 12:15 a.m.•127 views

CVE-2023-32021

Windows SMB Witness Service Security Feature Bypass Vulnerability

7.1CVSS8.1AI score0.01549EPSS

CVE•added 2018/11/14 1:29 a.m.•126 views

CVE-2018-8485

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows ...

7.8CVSS6.5AI score0.00512EPSS

CVE•added 2019/03/06 12:0 a.m.•126 views

CVE-2019-0598

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0595, CVE-2019-0596, CVE-2019-0597, CVE-2019-0599, CVE-2019-0625.

9.3CVSS8.4AI score0.32161EPSS

CVE•added 2019/03/06 12:0 a.m.•126 views

CVE-2019-0619

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0602, CVE-2019-0615, CVE-2019-0616, CVE-2019-0660, CVE-2019-0664.

6.5CVSS7.2AI score0.2251EPSS

CVE•added 2019/03/06 12:0 a.m.•126 views

CVE-2019-0635

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

6.2CVSS6.8AI score0.00573EPSS

CVE•added 2019/03/06 12:0 a.m.•126 views

CVE-2019-0637

A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to cellular network connections, aka 'Windows Defender Firewall Security Feature Bypass Vulnerability'.

7.5CVSS8.3AI score0.11945EPSS

CVE•added 2019/04/09 12:29 a.m.•126 views

CVE-2019-0694

An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682, CVE-2019-0689, CVE-2019-0692, CVE-2019-0693.

7.8CVSS7.8AI score0.004EPSS

CVE•added 2019/04/09 2:29 a.m.•126 views

CVE-2019-0759

An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory, aka 'Windows Print Spooler Information Disclosure Vulnerability'.

5.5CVSS6.2AI score0.00401EPSS

CVE•added 2019/04/09 9:29 p.m.•126 views

CVE-2019-0790

9.3CVSS8.8AI score0.28171EPSS

CVE•added 2020/08/17 7:15 p.m.•126 views

CVE-2020-1474

An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.To exploit the vulnerability, an aut...

7.8CVSS7.8AI score0.01199EPSS

CVE•added 2020/08/17 7:15 p.m.•126 views

CVE-2020-1477

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights.There are multiple ways an attacke...

7.8CVSS8.2AI score0.04189EPSS

CVE•added 2020/08/17 7:15 p.m.•126 views

CVE-2020-1525

8.8CVSS8.2AI score0.08623EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28335

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28340

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.09536EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28341

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11968EPSS

CVE•added 2021/04/13 8:15 p.m.•126 views

CVE-2021-28354

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/08/12 6:15 p.m.•126 views

CVE-2021-34536

Storage Spaces Controller Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00537EPSS

CVE•added 2021/08/12 6:15 p.m.•126 views

CVE-2021-34537

Windows Bluetooth Driver Elevation of Privilege Vulnerability

8CVSS8.6AI score0.00259EPSS

CVE•added 2021/09/15 12:15 p.m.•126 views

CVE-2021-38632

BitLocker Security Feature Bypass Vulnerability

5.7CVSS6.5AI score0.00475EPSS

CVE•added 2021/11/10 1:19 a.m.•126 views

CVE-2021-41371

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

4.4CVSS6.3AI score0.00408EPSS

CVE•added 2022/04/15 7:15 p.m.•126 views

CVE-2022-26783

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

6.8CVSS6.3AI score0.05624EPSS

CVE•added 2022/04/15 7:15 p.m.•126 views

CVE-2022-26920

Windows Graphics Component Information Disclosure Vulnerability

5.5CVSS7AI score0.00528EPSS

CVE•added 2022/08/26 6:15 p.m.•126 views

CVE-2022-34302

A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currentl...

6.7CVSS8.2AI score0.00061EPSS

CVE•added 2022/09/13 7:15 p.m.•126 views

CVE-2022-34719

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00395EPSS

CVE•added 2023/03/14 5:15 p.m.•126 views

CVE-2023-23421

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0034EPSS

CVE•added 2023/08/08 6:15 p.m.•126 views

CVE-2023-35387

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

8.8CVSS9.1AI score0.00341EPSS

CVE•added 2019/01/08 9:29 p.m.•125 views

CVE-2019-0549

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Wind...

5.5CVSS5.6AI score0.01077EPSS

CVE•added 2019/01/08 9:29 p.m.•125 views

CVE-2019-0554

5.5CVSS5.6AI score0.01077EPSS

CVE•added 2019/04/08 11:29 p.m.•125 views

CVE-2019-0617

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'.

9.3CVSS8.4AI score0.25636EPSS

CVE•added 2019/03/06 12:0 a.m.•125 views

CVE-2019-0632

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0631.

7.8CVSS8.3AI score0.00202EPSS

CVE•added 2019/04/09 9:29 p.m.•125 views

CVE-2019-0842

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Remote Code Execution Vulnerability'.

9.3CVSS8.8AI score0.20489EPSS

CVE•added 2020/06/09 8:15 p.m.•125 views

CVE-2020-1239

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1238.

8.8CVSS8.3AI score0.27581EPSS

CVE•added 2020/08/17 7:15 p.m.•125 views

CVE-2020-1383

An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s systemTo exploit this vulnerability, an attacker would need to run a special...

5.5CVSS6.9AI score0.00958EPSS

CVE•added 2020/10/16 11:15 p.m.•125 views

CVE-2020-16939

An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context.To exploit the vulnerability, an attacker would first have to log on to the system, and then run a speciall...

7.8CVSS8AI score0.23226EPSS

CVE•added 2021/01/12 8:15 p.m.•125 views

CVE-2021-1674

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability

8.8CVSS8.7AI score0.00889EPSS

CVE•added 2021/04/13 8:15 p.m.•125 views

CVE-2021-28329

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.12162EPSS

CVE•added 2021/04/13 8:15 p.m.•125 views

CVE-2021-28337

Remote Procedure Call Runtime Remote Code Execution Vulnerability