Windows Server 2019 Security Vulnerabilities and Issues — Page 7 of Windows Server 2019 CVE List

An information disclosure vulnerability exists in SymCrypt during the OAEP decryption stage. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log on to an affected syst...

5.6CVSS7AI score0.00417EPSS

CVE•added 2020/04/15 3:15 p.m.•90 views

CVE-2020-0794

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.

5.5CVSS6.4AI score0.00232EPSS

CVE•added 2020/03/12 4:15 p.m.•90 views

CVE-2020-0859

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.

5.5CVSS6.7AI score0.00978EPSS

CVE•added 2020/06/09 8:15 p.m.•90 views

CVE-2020-1261

An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1263.

5.5CVSS6.2AI score0.00479EPSS

CVE•added 2020/11/11 7:15 a.m.•90 views

CVE-2020-17046

Windows Error Reporting Denial of Service Vulnerability

5.5CVSS6.7AI score0.00366EPSS

CVE•added 2021/04/13 8:15 p.m.•90 views

CVE-2021-28309

Windows Kernel Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00403EPSS

CVE•added 2024/07/09 5:15 p.m.•90 views

CVE-2024-38017

Microsoft Message Queuing Information Disclosure Vulnerability

5.5CVSS7AI score0.00237EPSS

CVE•added 2024/08/13 6:15 p.m.•90 views

CVE-2024-38122

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

5.5CVSS5.2AI score0.00901EPSS

CVE•added 2020/04/15 3:15 p.m.•89 views

CVE-2020-0962

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0699.

5.5CVSS6AI score0.00873EPSS

CVE•added 2020/09/11 5:15 p.m.•89 views

CVE-2020-1038

A denial of service vulnerability exists when Windows Routing Utilities improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.To exploit this vulnerability, an attacker would have to log on to an affected system...

5.5CVSS6.8AI score0.00702EPSS

CVE•added 2020/11/11 7:15 a.m.•89 views

CVE-2020-17029

Windows Canonical Display Driver Information Disclosure Vulnerability

5.5CVSS7AI score0.00446EPSS

CVE•added 2021/02/25 11:15 p.m.•89 views

CVE-2021-24076

Microsoft Windows VMSwitch Information Disclosure Vulnerability

5.5CVSS6.9AI score0.00285EPSS

CVE•added 2022/10/11 7:15 p.m.•89 views

CVE-2022-37965

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

5.9CVSS6.9AI score0.01EPSS

CVE•added 2024/07/09 5:15 p.m.•89 views

CVE-2024-38099

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

5.9CVSS7.4AI score0.01843EPSS

CVE•added 2025/01/14 6:15 p.m.•89 views

CVE-2025-21225

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

5.9CVSS5.8AI score0.0025EPSS

CVE•added 2018/12/12 12:29 a.m.•88 views

CVE-2018-8637

An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass, aka "Win32k Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Window...

5.5CVSS6.2AI score0.01202EPSS

CVE•added 2019/08/14 9:15 p.m.•88 views

CVE-2019-0717

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash.To exploit the vulnerabi...

5.8CVSS5.7AI score0.01294EPSS

CVE•added 2020/09/11 5:15 p.m.•88 views

CVE-2020-0837

An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors.To exploit this vulnerabil...

5.3CVSS6.7AI score0.01671EPSS

CVE•added 2020/09/11 5:15 p.m.•88 views

CVE-2020-0921

Microsoft Graphics Component Denial of Service Vulnerability

5.5CVSS6.7AI score0.01084EPSS

CVE•added 2020/09/11 5:15 p.m.•88 views

CVE-2020-0928

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.To exploit this vulnerability, an attacker would have to log on to ...

5.5CVSS4.7AI score0.00986EPSS

CVE•added 2020/04/15 3:15 p.m.•88 views

CVE-2020-0982

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0987, CVE-2020-1005.

5.5CVSS6.2AI score0.0176EPSS

CVE•added 2020/06/09 8:15 p.m.•88 views

CVE-2020-1263

5.5CVSS6.2AI score0.00479EPSS

CVE•added 2020/06/09 8:15 p.m.•88 views

CVE-2020-1290

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.

5.5CVSS6AI score0.00978EPSS

CVE•added 2020/11/11 7:15 a.m.•88 views

CVE-2020-17030

Windows MSCTF Server Information Disclosure Vulnerability

5.5CVSS5.9AI score0.00446EPSS

CVE•added 2020/11/11 7:15 a.m.•88 views

CVE-2020-17056

Windows Network File System Information Disclosure Vulnerability

5.5CVSS7AI score0.00446EPSS

CVE•added 2023/07/11 6:15 p.m.•88 views

CVE-2023-35306

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

5.5CVSS7AI score0.00245EPSS

CVE•added 2019/10/10 2:15 p.m.•87 views

CVE-2019-1325

An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the operating system improperly handles specific local calls within Windows 7 for 32-bit systems, aka 'Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability'.

5.5CVSS7AI score0.00443EPSS

CVE•added 2019/12/10 10:15 p.m.•87 views

CVE-2019-1472

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1474.

5.5CVSS6.1AI score0.01624EPSS

CVE•added 2020/07/14 11:15 p.m.•87 views

CVE-2020-1351

An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.

5.5CVSS6.6AI score0.00353EPSS

CVE•added 2021/01/12 8:15 p.m.•87 views

CVE-2021-1684

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the rem...

5.5CVSS6.5AI score0.03167EPSS

CVE•added 2021/04/13 8:15 p.m.•87 views

CVE-2021-26417

Windows Overlay Filter Information Disclosure Vulnerability

5.5CVSS5.5AI score0.00488EPSS

CVE•added 2021/04/13 8:15 p.m.•87 views

CVE-2021-27093

Windows Kernel Information Disclosure Vulnerability

5.5CVSS6.6AI score0.00442EPSS

CVE•added 2022/09/13 7:15 p.m.•87 views

CVE-2022-34728

Windows Graphics Component Information Disclosure Vulnerability

5.5CVSS7AI score0.01176EPSS

CVE•added 2025/01/14 6:15 p.m.•87 views

CVE-2025-21319

Windows Kernel Memory Information Disclosure Vulnerability

5.5CVSS5.3AI score0.00104EPSS

CVE•added 2025/04/08 6:15 p.m.•87 views

CVE-2025-27471

Sensitive data storage in improperly locked memory in Microsoft Streaming Service allows an unauthorized attacker to deny service over a network.

5.9CVSS6.9AI score0.00044EPSS

CVE•added 2019/08/14 9:15 p.m.•86 views

CVE-2019-1227

5.5CVSS5.3AI score0.00902EPSS

CVE•added 2019/09/11 10:15 p.m.•86 views

CVE-2019-1254

An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerability'.

5.5CVSS6.1AI score0.0059EPSS

CVE•added 2019/10/10 2:15 p.m.•86 views

CVE-2019-1334

5.5CVSS6.5AI score0.07944EPSS

CVE•added 2019/11/12 7:15 p.m.•86 views

CVE-2019-1382

An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege Vulnerability'.

5.5CVSS7AI score0.00349EPSS

CVE•added 2020/11/11 7:15 a.m.•86 views

CVE-2020-17013

Win32k Information Disclosure Vulnerability

5.5CVSS5.9AI score0.00541EPSS

CVE•added 2021/04/13 8:15 p.m.•86 views

CVE-2021-28317

Microsoft Windows Codecs Library Information Disclosure Vulnerability

5.5CVSS6.5AI score0.00448EPSS

CVE•added 2023/07/11 6:15 p.m.•86 views

CVE-2023-32040

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability