Microsoft Windows Server 2019 vulnerabilities
3,952 known vulnerabilities affecting microsoft/windows_server_2019.
Total CVEs
3,952
CISA KEV
125
actively exploited
Public exploits
113
Exploited in wild
171
Severity breakdown
CRITICAL126HIGH2786MEDIUM1024LOW16
Vulnerabilities
Page 110 of 198
CVE-2024-20687P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.53292024-01-09
CVE-2024-20687 [HIGH] CWE-125 CVE-2024-20687: Microsoft AllJoyn API Denial of Service Vulnerability
Microsoft AllJoyn API Denial of Service Vulnerability
nvd
CVE-2025-21351P3HIGHCVSS 7.5fixed in 10.0.17763.6893≥ 10.0.17763.0, < 10.0.17763.68932025-02-11
CVE-2025-21351 [HIGH] CWE-400 CVE-2025-21351: Windows Active Directory Domain Services API Denial of Service Vulnerability
Windows Active Directory Domain Services API Denial of Service Vulnerability
nvd
CVE-2024-49121P3HIGHCVSS 7.5fixed in 10.0.17763.6659≥ 10.0.17763.0, < 10.0.17763.66592024-12-12
CVE-2024-49121 [HIGH] CWE-476 CVE-2024-49121: Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
nvd
CVE-2023-36003P3HIGHCVSS 7.3≥ 10.0.17763.0, < 10.0.17763.52062023-12-12
CVE-2023-36003 [HIGH] CWE-426 CVE-2023-36003: XAML Diagnostics Elevation of Privilege Vulnerability
XAML Diagnostics Elevation of Privilege Vulnerability
nvd
CVE-2024-43541P3HIGHCVSS 7.5fixed in 10.0.17763.6414≥ 10.0.17763.0, < 10.0.17763.64142024-10-08
CVE-2024-43541 [HIGH] CWE-400 CVE-2024-43541: Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
nvd
CVE-2024-43515P3HIGHCVSS 7.5fixed in 10.0.17763.6414≥ 10.0.17763.0, < 10.0.17763.64142024-10-08
CVE-2024-43515 [HIGH] CWE-400 CVE-2024-43515: Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
nvd
CVE-2024-43545P3HIGHCVSS 7.5fixed in 10.0.17763.6414≥ 10.0.17763.0, < 10.0.17763.64142024-10-08
CVE-2024-43545 [HIGH] CWE-400 CVE-2024-43545: Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
nvd
CVE-2024-43544P3HIGHCVSS 7.5fixed in 10.0.17763.6414≥ 10.0.17763.0, < 10.0.17763.64142024-10-08
CVE-2024-43544 [HIGH] CWE-400 CVE-2024-43544: Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
nvd
CVE-2020-16961P3HIGHCVSS 7.8≥ 10.0.17763.0, < publication2020-12-10
CVE-2020-16961 [HIGH] CVE-2020-16961: Windows Backup Engine Elevation of Privilege Vulnerability
Windows Backup Engine Elevation of Privilege Vulnerability
nvd
CVE-2020-16960P3HIGHCVSS 7.8≥ 10.0.17763.0, < publication2020-12-10
CVE-2020-16960 [HIGH] CVE-2020-16960: Windows Backup Engine Elevation of Privilege Vulnerability
Windows Backup Engine Elevation of Privilege Vulnerability
nvd
CVE-2020-0886P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-0886 [HIGH] CVE-2020-0886: <p>An elevation of privilege vulnerability exists when the Windows Storage Services improperly handl
An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.
To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted application.
The
nvd
CVE-2020-1471P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1471 [HIGH] CVE-2020-1471: <p>An elevation of privilege vulnerability exists when Microsoft Windows CloudExperienceHost fails t
An elevation of privilege vulnerability exists when Microsoft Windows CloudExperienceHost fails to check COM objects. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.
To exploit the vulnerability, an attacker would have to log on to an affected system and run a specially crafted script or application.
nvd
CVE-2018-8415P3HIGHCVSS 7.8v(Server Core installation)2018-11-14
CVE-2018-8415 [HIGH] CWE-94 CVE-2018-8415: A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code
A tampering vulnerability exists in PowerShell that could allow an attacker to execute unlogged code, aka "Microsoft PowerShell Tampering Vulnerability." This affects Windows 7, PowerShell Core 6.1, Windows Server 2012 R2, Windows RT 8.1, PowerShell Core 6.0, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008
nvd
CVE-2018-8484P3HIGHCVSS 7.8v(Server Core installation)2018-10-10
CVE-2018-8484 [HIGH] CWE-404 CVE-2018-8484: An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver imp
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10
nvd
CVE-2022-41056P3HIGHCVSS 7.5≥ 10.0.17763.0, < 10.0.17763.36502022-11-09
CVE-2022-41056 [HIGH] CVE-2022-41056: Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
nvd
CVE-2020-16963P3HIGHCVSS 7.8≥ 10.0.17763.0, < publication2020-12-10
CVE-2020-16963 [HIGH] CVE-2020-16963: Windows Backup Engine Elevation of Privilege Vulnerability
Windows Backup Engine Elevation of Privilege Vulnerability
nvd
CVE-2020-16962P3HIGHCVSS 7.8≥ 10.0.17763.0, < publication2020-12-10
CVE-2020-16962 [HIGH] CVE-2020-16962: Windows Backup Engine Elevation of Privilege Vulnerability
Windows Backup Engine Elevation of Privilege Vulnerability
nvd
CVE-2020-16959P3HIGHCVSS 7.8≥ 10.0.17763.0, < publication2020-12-10
CVE-2020-16959 [HIGH] CVE-2020-16959: Windows Backup Engine Elevation of Privilege Vulnerability
Windows Backup Engine Elevation of Privilege Vulnerability
nvd
CVE-2020-16964P3HIGHCVSS 7.8≥ 10.0.17763.0, < publication2020-12-10
CVE-2020-16964 [HIGH] CVE-2020-16964: Windows Backup Engine Elevation of Privilege Vulnerability
Windows Backup Engine Elevation of Privilege Vulnerability
nvd
CVE-2020-16958P3HIGHCVSS 7.8≥ 10.0.17763.0, < publication2020-12-10
CVE-2020-16958 [HIGH] CVE-2020-16958: Windows Backup Engine Elevation of Privilege Vulnerability
Windows Backup Engine Elevation of Privilege Vulnerability
nvd