Windows Server 2019@- Security Vulnerabilities and Issues — Page 4 of Windows Server 2019@- CVE List | Vulners.com

Lucene search

K

MicrosoftWindows Server 2019-

2708 matches found

CVE•added 2023/10/10 6:15 p.m.•361 views

CVE-2023-36585

Windows upnphost.dll Denial of Service Vulnerability

7.5CVSS8.4AI score0.03669EPSS

CVE•added 2023/10/10 6:15 p.m.•361 views

CVE-2023-36717

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

6.5CVSS7.7AI score0.00064EPSS

CVE•added 2022/03/09 5:15 p.m.•360 views

CVE-2022-24503

Remote Desktop Protocol Client Information Disclosure Vulnerability

5.4CVSS6.6AI score0.00778EPSS

CVE•added 2021/07/16 9:15 p.m.•359 views

CVE-2021-34481

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or de...

9.8CVSS8.6AI score0.26941EPSS

CVE•added 2023/10/10 6:15 p.m.•359 views

CVE-2023-36709

Microsoft AllJoyn API Denial of Service Vulnerability

7.5CVSS8.4AI score0.03748EPSS

CVE•added 2019/10/10 2:15 p.m.•358 views

CVE-2019-1365

An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT AUTHORITY\sy...

9.9CVSS9.3AI score0.01501EPSS

CVE•added 2023/10/10 6:15 p.m.•358 views

CVE-2023-36724

Windows Power Management Service Information Disclosure Vulnerability

5.5CVSS7AI score0.00102EPSS

CVE•added 2022/01/11 9:15 p.m.•355 views

CVE-2022-21894

Secure Boot Security Feature Bypass Vulnerability

4.9CVSS6.2AI score0.45082EPSS

CVE•added 2019/04/09 9:29 p.m.•352 views

CVE-2019-0836

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841.

7.8CVSS6.7AI score0.85917EPSS

CVE•added 2021/11/10 1:19 a.m.•349 views

CVE-2021-42291

Active Directory Domain Services Elevation of Privilege Vulnerability

8.8CVSS8AI score0.00954EPSS

CVE•added 2022/03/09 5:15 p.m.•344 views

CVE-2022-23288

Windows DWM Core Library Elevation of Privilege Vulnerability

7CVSS7.6AI score0.00356EPSS

CVE•added 2022/09/13 7:15 p.m.•344 views

CVE-2022-26928

Windows Photo Import API Elevation of Privilege Vulnerability

7CVSS8.1AI score0.001EPSS

CVE•added 2022/05/10 9:15 p.m.•340 views

CVE-2022-26937

Windows Network File System Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.6661EPSS

CVE•added 2022/06/15 10:15 p.m.•333 views

CVE-2022-30136

Windows Network File System Remote Code Execution Vulnerability

10CVSS9.6AI score0.42706EPSS

CVE•added 2020/07/29 6:15 p.m.•323 views

CVE-2020-15707

Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the functionality is not included in GRUB2 upstream), leading to a heap-based buffer overflow. These could be triggered by an extrem...

6.4CVSS7.6AI score0.00033EPSS

CVE•added 2021/01/12 8:15 p.m.•321 views

CVE-2021-1648

Microsoft splwow64 Elevation of Privilege Vulnerability

7.8CVSS7.7AI score0.00979EPSS

CVE•added 2023/03/14 5:15 p.m.•321 views

CVE-2023-21708

Remote Procedure Call Runtime Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.04719EPSS

CVE•added 2020/06/09 8:15 p.m.•320 views

CVE-2020-1269

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020...

7.8CVSS7.7AI score0.19295EPSS

CVE•added 2021/06/08 11:15 p.m.•319 views

CVE-2021-26414

Windows DCOM Server Security Feature Bypass

6.5CVSS6.9AI score0.14238EPSS

CVE•added 2025/03/11 5:16 p.m.•315 views

CVE-2025-26633

Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.

7CVSS6.8AI score0.05371EPSS

CVE•added 2022/09/13 7:15 p.m.•312 views

CVE-2022-34721

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

9.8CVSS9.7AI score0.18666EPSS

CVE•added 2022/04/15 7:15 p.m.•310 views

CVE-2022-24490

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

8.1CVSS6.8AI score0.15202EPSS

CVE•added 2022/08/09 8:15 p.m.•309 views

CVE-2022-30133

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.15582EPSS

CVE•added 2023/11/14 6:15 p.m.•307 views

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability

7.8CVSS8.6AI score0.00162EPSS

CVE•added 2021/07/14 6:15 p.m.•306 views

CVE-2021-34514

Windows Kernel Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.00403EPSS

CVE•added 2018/12/12 12:29 a.m.•298 views

CVE-2018-8641

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Wind...

7.8CVSS8.5AI score0.2752EPSS

CVE•added 2022/07/12 11:15 p.m.•297 views

CVE-2022-22049

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

7.8CVSS8.2AI score0.00235EPSS

CVE•added 2023/05/09 6:15 p.m.•297 views

CVE-2023-24943

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.01302EPSS

CVE•added 2021/07/16 9:15 p.m.•293 views

CVE-2021-34458

Windows Kernel Remote Code Execution Vulnerability

9.9CVSS9.4AI score0.01265EPSS

CVE•added 2023/11/14 6:15 p.m.•292 views

CVE-2023-36394

Windows Search Service Elevation of Privilege Vulnerability

7CVSS8.1AI score0.01054EPSS

CVE•added 2020/07/29 6:15 p.m.•291 views

CVE-2020-15706

GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing, leading to arbitrary code execution and secure boot restriction bypass. This issue affects GRUB2 ...

6.4CVSS7.7AI score0.00064EPSS

CVE•added 2020/07/29 6:15 p.m.•289 views

CVE-2020-15705

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. Thi...

6.4CVSS7.1AI score0.00024EPSS

CVE•added 2019/04/09 9:29 p.m.•287 views

CVE-2019-0685

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859.

7.8CVSS8.2AI score0.84886EPSS

CVE•added 2019/08/14 9:15 p.m.•287 views

CVE-2019-1182

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. A...

10CVSS9.7AI score0.09129EPSS

CVE•added 2018/12/12 12:29 a.m.•286 views

CVE-2018-8639

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...

8.4CVSS8.5AI score0.2752EPSS

CVE•added 2022/03/09 5:15 p.m.•286 views

CVE-2022-24505

Windows ALPC Elevation of Privilege Vulnerability

7CVSS7.6AI score0.00118EPSS

CVE•added 2021/09/15 12:15 p.m.•284 views

CVE-2021-38633

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00426EPSS

CVE•added 2022/09/13 7:15 p.m.•281 views

CVE-2022-30170

Windows Credential Roaming Service Elevation of Privilege Vulnerability

7.3CVSS8.3AI score0.00826EPSS

CVE•added 2024/01/09 6:15 p.m.•279 views

CVE-2024-20674

Windows Kerberos Security Feature Bypass Vulnerability

8.8CVSS8.4AI score0.15936EPSS

CVE•added 2021/09/15 12:15 p.m.•277 views

CVE-2021-36963

Windows Common Log File System Driver Elevation of Privilege Vulnerability

7.8CVSS8AI score0.00394EPSS

CVE•added 2019/07/15 7:15 p.m.•276 views

CVE-2019-1006

An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF), allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'.

7.5CVSS7.8AI score0.02931EPSS

CVE•added 2022/04/15 7:15 p.m.•275 views

CVE-2022-24491

Windows Network File System Remote Code Execution Vulnerability

9.8CVSS9.6AI score0.42379EPSS

CVE•added 2020/11/11 7:15 a.m.•274 views

CVE-2020-17051

Windows Network File System Remote Code Execution Vulnerability

10CVSS9.6AI score0.18017EPSS

CVE•added 2022/04/15 7:15 p.m.•274 views

CVE-2022-24500

Windows SMB Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.36017EPSS

CVE•added 2023/11/14 6:15 p.m.•274 views

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

7.8CVSS8.5AI score0.00134EPSS

CVE•added 2019/06/12 2:29 p.m.•273 views

CVE-2019-1040

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features.To exploit t...

5.9CVSS6.7AI score0.8779EPSS

CVE•added 2019/04/09 9:29 p.m.•271 views

CVE-2019-0796

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys), aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841.

5.5CVSS6.7AI score0.85917EPSS

CVE•added 2020/01/14 11:15 p.m.•271 views

CVE-2020-0611

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'.

7.5CVSS8.8AI score0.14967EPSS

CVE•added 2022/04/15 7:15 p.m.•271 views

CVE-2022-24528

Remote Procedure Call Runtime Remote Code Execution Vulnerability

8.8CVSS9.4AI score0.01953EPSS

CVE•added 2021/05/11 7:15 p.m.•269 views

CVE-2021-31167

Windows Container Manager Service Elevation of Privilege Vulnerability

7.8CVSS7.6AI score0.0033EPSS

Total number of security vulnerabilities2708