Microsoft Windows Server vulnerabilities

1,081 known vulnerabilities affecting microsoft/windows_server.

Total CVEs
1,081
CISA KEV
33
actively exploited
Public exploits
61
Exploited in wild
38
Severity breakdown
CRITICAL36HIGH746MEDIUM295LOW4

Vulnerabilities

Page 21 of 55
CVE-2020-1121HIGHCVSS 7.8v2019v2019 (Core installation)2020-05-21
CVE-2020-1121 [HIGH] CVE-2020-1121: An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1111, CVE-2020-1165, CVE-2020-1166.
cvelistv5
CVE-2020-1138HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+3 more2020-05-21
CVE-2020-1138 [HIGH] CVE-2020-1138: An elevation of privilege vulnerability exists when the Storage Service improperly handles file oper An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'.
cvelistv5nvd
CVE-2020-1142HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+1 more2020-05-21
CVE-2020-1142 [HIGH] CVE-2020-1142: An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka 'Windows GDI Elevation of Privilege Vulnerability'.
cvelistv5nvd
CVE-2020-1134HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+3 more2020-05-21
CVE-2020-1134 [HIGH] CVE-2020-1134: An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repo An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1144, CVE-2020-1184, CVE-2020-1185, CVE-202
cvelistv5
CVE-2020-1081HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+15 more2020-05-21
CVE-2020-1081 [HIGH] CWE-20 CVE-2020-1081: An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vulnerability'.
cvelistv5nvd
CVE-2020-1175HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+15 more2020-05-21
CVE-2020-1175 [HIGH] CVE-2020-1175: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remot A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1051, CVE-2020-1174, CVE-2020-1176.
cvelistv5
CVE-2020-1110HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+1 more2020-05-21
CVE-2020-1110 [HIGH] CVE-2020-1110: An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Ele An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1109.
cvelistv5
CVE-2020-1131HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+3 more2020-05-21
CVE-2020-1131 [HIGH] CVE-2020-1131: An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repo An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1134, CVE-2020-1144, CVE-2020-1184, CVE-2020-1185, CVE-202
cvelistv5
CVE-2020-1048HIGHCVSS 7.8PoCvversion 1803 (Core Installation)v2019+15 more2020-05-21
CVE-2020-1048 [HIGH] CWE-669 CVE-2020-1048: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly all An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.
cvelistv5nvd
CVE-2020-1185HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+3 more2020-05-21
CVE-2020-1185 [HIGH] CVE-2020-1185: An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repo An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020-1184, CVE-202
cvelistv5
CVE-2020-1061HIGHCVSS 8.8vversion 1803 (Core Installation)v2019+15 more2020-05-21
CVE-2020-1061 [HIGH] CWE-787 CVE-2020-1061: A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles ob A remote code execution vulnerability exists in the way that the Microsoft Script Runtime handles objects in memory, aka 'Microsoft Script Runtime Remote Code Execution Vulnerability'.
cvelistv5nvd
CVE-2020-1114HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+15 more2020-05-21
CVE-2020-1114 [HIGH] CVE-2020-1114: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Pr An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1087.
cvelistv5
CVE-2020-1186HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+3 more2020-05-21
CVE-2020-1186 [HIGH] CVE-2020-1186: An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repo An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020-1184, CVE-202
cvelistv5
CVE-2020-1068HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+3 more2020-05-21
CVE-2020-1068 [HIGH] CVE-2020-1068: An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1010, CVE-2020-1079.
cvelistv5
CVE-2020-0909HIGHCVSS 7.5vversion 1803 (Core Installation)v2019+11 more2020-05-21
CVE-2020-0909 [HIGH] CVE-2020-0909: A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle s A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle t
cvelistv5nvd
CVE-2020-1164HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+3 more2020-05-21
CVE-2020-1164 [HIGH] CVE-2020-1164: An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privil An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1077, CVE-2020-1086, CVE-2020-1090, CVE-2020-1125, CVE-2020-1139, CVE-2020-1149, CVE-2020-1151, CVE-2020-11
cvelistv5
CVE-2020-1124HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+3 more2020-05-21
CVE-2020-1124 [HIGH] CVE-2020-1124: An elevation of privilege vulnerability exists when the Windows State Repository Service improperly An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020-1184, CVE-2020-1185, CVE-2020-1186, CVE-2020-1187, CVE-2020-1188, CVE-2020-1189
cvelistv5nvd
CVE-2020-1184HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+3 more2020-05-21
CVE-2020-1184 [HIGH] CVE-2020-1184: An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repo An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows State Repository Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1124, CVE-2020-1131, CVE-2020-1134, CVE-2020-1144, CVE-2020-1185, CVE-202
cvelistv5
CVE-2020-1137HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+1 more2020-05-21
CVE-2020-1137 [HIGH] CVE-2020-1137: An elevation of privilege vulnerability exists in the way the Windows Push Notification Service hand An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.
cvelistv5nvd
CVE-2020-1079HIGHCVSS 7.8vversion 1803 (Core Installation)v2019+7 more2020-05-21
CVE-2020-1079 [HIGH] CVE-2020-1079: An elevation of privilege vulnerability exists when the Windows fails to properly handle objects in memory, aka 'Microsoft Windows Elevation of Privil An elevation of privilege vulnerability exists when the Windows fails to properly handle objects in memory, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1010, CVE-2020-1068.
cvelistv5