Microsoft Windows Server vulnerabilities
705 known vulnerabilities affecting microsoft/windows_server.
Total CVEs
705
CISA KEV
23
actively exploited
Public exploits
39
Exploited in wild
36
Severity breakdown
CRITICAL27HIGH458MEDIUM216LOW4
Vulnerabilities
Page 26 of 36
CVE-2022-29126P4HIGHCVSS 7.0v20h22022-05-10
CVE-2022-29126 [HIGH] CVE-2022-29126: Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability
Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability
nvd
CVE-2022-21866P4HIGHCVSS 7.0v20h2v20222022-01-11
CVE-2022-21866 [HIGH] CVE-2022-21866: Windows System Launcher Elevation of Privilege Vulnerability
Windows System Launcher Elevation of Privilege Vulnerability
nvd
CVE-2019-1338P4MEDIUMCVSS 5.9v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+6 more2019-10-10
CVE-2019-1338 [MEDIUM] CVE-2019-1338: A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacke
A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a client is also sending LMv2 responses, aka 'Windows NTLM Security Feature Bypass Vulnerability'.
nvd
CVE-2022-22016P4HIGHCVSS 7.0v20h2v20222022-05-10
CVE-2022-22016 [HIGH] CVE-2022-22016: Windows PlayToManager Elevation of Privilege Vulnerability
Windows PlayToManager Elevation of Privilege Vulnerability
nvd
CVE-2022-26939P4HIGHCVSS 7.0v20h22022-05-10
CVE-2022-26939 [HIGH] CVE-2022-26939: Storage Spaces Direct Elevation of Privilege Vulnerability
Storage Spaces Direct Elevation of Privilege Vulnerability
nvd
CVE-2022-24460P4HIGHCVSS 7.0v20h2v20222022-03-09
CVE-2022-24460 [HIGH] CVE-2022-24460: Tablet Windows User Interface Application Elevation of Privilege Vulnerability
Tablet Windows User Interface Application Elevation of Privilege Vulnerability
nvd
CVE-2022-29112P4MEDIUMCVSS 6.5v20222022-05-10
CVE-2022-29112 [MEDIUM] CVE-2022-29112: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2019-0656P4HIGHCVSS 7.0v2012 R2v2012 R2 (Core installation)+6 more2019-03-05
CVE-2019-0656 [HIGH] CVE-2019-0656: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle obje
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.
nvd
CVE-2020-1204P4HIGHCVSS 7.1v2019v2019 (Core installation)2020-06-09
CVE-2020-1204 [HIGH] CVE-2020-1204: An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnosti
An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'.
nvd
CVE-2019-0931P4HIGHCVSS 7.0vversion 1803 (Core Installation)v2019+1 more2019-05-16
CVE-2019-0931 [HIGH] CVE-2019-0931: An elevation of privilege vulnerability exists when the Storage Service improperly handles file oper
An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations, aka 'Windows Storage Service Elevation of Privilege Vulnerability'.
nvd
CVE-2019-1037P4HIGHCVSS 7.0vversion 1803 (Core Installation)v2019+1 more2019-07-15
CVE-2019-1037 [HIGH] CVE-2019-1037: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles file
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.
nvd
CVE-2022-29135P4HIGHCVSS 7.0v20h22022-05-10
CVE-2022-29135 [HIGH] CVE-2022-29135: Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
nvd
CVE-2022-29125P4HIGHCVSS 7.0v20h2v20222022-05-10
CVE-2022-29125 [HIGH] CVE-2022-29125: Windows Push Notifications Apps Elevation of Privilege Vulnerability
Windows Push Notifications Apps Elevation of Privilege Vulnerability
nvd
CVE-2022-21867P4HIGHCVSS 7.0v20h2v20222022-01-11
CVE-2022-21867 [HIGH] CVE-2022-21867: Windows Push Notifications Apps Elevation of Privilege Vulnerability
Windows Push Notifications Apps Elevation of Privilege Vulnerability
nvd
CVE-2022-29151P4HIGHCVSS 7.0v20h22022-05-10
CVE-2022-29151 [HIGH] CVE-2022-29151: Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
nvd
CVE-2022-29150P4HIGHCVSS 7.0v20h22022-05-10
CVE-2022-29150 [HIGH] CVE-2022-29150: Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
nvd
CVE-2022-21896P4HIGHCVSS 7.0v20h2v20222022-01-11
CVE-2022-21896 [HIGH] CWE-362 CVE-2022-21896: Windows DWM Core Library Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-29138P4HIGHCVSS 7.0v20h22022-05-10
CVE-2022-29138 [HIGH] CVE-2022-29138: Windows Clustered Shared Volume Elevation of Privilege Vulnerability
Windows Clustered Shared Volume Elevation of Privilege Vulnerability
nvd
CVE-2022-23288P4HIGHCVSS 7.0v20h2v20222022-03-09
CVE-2022-23288 [HIGH] CVE-2022-23288: Windows DWM Core Library Elevation of Privilege Vulnerability
Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2019-1318P4MEDIUMCVSS 5.9v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+15 more2019-10-10
CVE-2019-1318 [MEDIUM] CWE-290 CVE-2019-1318: A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Se
A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non- Extended Master Secret (EMS) sessions, aka 'Microsoft Windows Transport Layer Security Spoofing Vulnerability'.
nvd