Microsoft Windows Server vulnerabilities
705 known vulnerabilities affecting microsoft/windows_server.
Total CVEs
705
CISA KEV
23
actively exploited
Public exploits
39
Exploited in wild
36
Severity breakdown
CRITICAL27HIGH458MEDIUM216LOW4
Vulnerabilities
Page 31 of 36
CVE-2019-0928P4MEDIUMCVSS 6.2v2016v2016 (Core installation)+1 more2019-09-11
CVE-2019-0928 [MEDIUM] CWE-20 CVE-2019-0928: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly v
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Service Vulnerability'.
nvd
CVE-2019-1071P4MEDIUMCVSS 5.5v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+15 more2019-07-15
CVE-2019-1071 [MEDIUM] CWE-200 CVE-2019-1071: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1073.
nvd
CVE-2019-0814P4MEDIUMCVSS 5.5v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+16 more2019-04-09
CVE-2019-0814 [MEDIUM] CVE-2019-0814: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0848.
nvd
CVE-2019-0840P4MEDIUMCVSS 5.5v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+16 more2019-04-09
CVE-2019-0840 [MEDIUM] CVE-2019-0840: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0844.
nvd
CVE-2019-1334P4MEDIUMCVSS 5.5v2016v2016 (Core installation)+3 more2019-10-10
CVE-2019-1334 [MEDIUM] CWE-200 CVE-2019-1334: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1345.
nvd
CVE-2019-0837P4MEDIUMCVSS 5.5vversion 1709 (Core Installation)vversion 1803 (Core Installation)2019-04-09
CVE-2019-0837 [MEDIUM] CVE-2019-0837: An information disclosure vulnerability exists when DirectX improperly handles objects in memory, ak
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.
nvd
CVE-2019-0621P4MEDIUMCVSS 5.5v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+8 more2019-03-05
CVE-2019-0621 [MEDIUM] CVE-2019-0621: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0661, CVE-2019-0663.
nvd
CVE-2019-0759P4MEDIUMCVSS 5.5v2008 R2 for x64-based Systems Service Pack 1 (Core installation)2019-04-09
CVE-2019-0759 [MEDIUM] CVE-2019-0759: An information disclosure vulnerability exists when the Windows Print Spooler does not properly hand
An information disclosure vulnerability exists when the Windows Print Spooler does not properly handle objects in memory, aka 'Windows Print Spooler Information Disclosure Vulnerability'.
nvd
CVE-2019-1216P4MEDIUMCVSS 5.5v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+7 more2019-09-11
CVE-2019-1216 [MEDIUM] CWE-200 CVE-2019-1216: An information disclosure vulnerability exists when DirectX improperly handles objects in memory, ak
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.
nvd
CVE-2019-1469P4MEDIUMCVSS 5.5vversion 1803 (Core Installation)v2019+15 more2019-12-10
CVE-2019-1469 [MEDIUM] CWE-200 CVE-2019-1469: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
nvd
CVE-2019-1283P4MEDIUMCVSS 5.5v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+1 more2019-09-11
CVE-2019-1283 [MEDIUM] CWE-200 CVE-2019-1283: An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
nvd
CVE-2019-0776P4MEDIUMCVSS 5.5v2016v2016 (Core installation)+4 more2019-04-09
CVE-2019-0776 [MEDIUM] CVE-2019-0776: An information disclosure vulnerability exists when the win32k component improperly provides kernel
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
nvd
CVE-2019-0702P4MEDIUMCVSS 5.5v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+4 more2019-04-09
CVE-2019-0702 [MEDIUM] CVE-2019-0702: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0755, CVE-2019-0767, CVE-2019-0775, CVE-2019-0782.
nvd
CVE-2020-0675P4MEDIUMCVSS 5.5vversion 1803 (Core Installation)v2019+15 more2020-02-11
CVE-2020-0675 [MEDIUM] CVE-2020-0675: An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service whe
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles o
nvd
CVE-2020-1160P4MEDIUMCVSS 5.5v2008 R2 for x64-based Systems Service Pack 1 (Core installation)v2008 R2 for Itanium-Based Systems Service Pack 1+15 more2020-06-09
CVE-2020-1160 [MEDIUM] CVE-2020-1160: An information disclosure vulnerability exists when the Microsoft Windows Graphics Component imprope
An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'.
nvd
CVE-2019-1472P4MEDIUMCVSS 5.5vversion 1803 (Core Installation)v2019+15 more2019-12-10
CVE-2019-1472 [MEDIUM] CWE-200 CVE-2019-1472: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1474.
nvd
CVE-2020-0658P4MEDIUMCVSS 5.5vversion 1803 (Core Installation)v2019+15 more2020-02-11
CVE-2020-0658 [MEDIUM] CVE-2020-0658: An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver w
An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'.
nvd
CVE-2019-1381P4MEDIUMCVSS 5.5v2012v2012 (Core installation)+7 more2019-11-12
CVE-2019-1381 [MEDIUM] CWE-200 CVE-2019-1381: An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unp
An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations, aka 'Microsoft Windows Information Disclosure Vulnerability'.
nvd
CVE-2020-0871P4MEDIUMCVSS 5.5vversion 1803 (Core Installation)v2019+10 more2020-03-12
CVE-2020-0871 [MEDIUM] CVE-2020-0871: An information disclosure vulnerability exists when Windows Network Connections Service fails to pro
An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Windows Network Connections Service Information Disclosure Vulnerability'.
nvd
CVE-2020-1075P4MEDIUMCVSS 5.5vversion 1803 (Core Installation)v2019+1 more2020-05-21
CVE-2020-1075 [MEDIUM] CVE-2020-1075: An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles o
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'.
nvd