cbcvebase.

Microsoft Windows Server 2019 vulnerabilities

3,952 known vulnerabilities affecting microsoft/windows_server_2019.

Total CVEs
3,952
CISA KEV
125
actively exploited
Public exploits
113
Exploited in wild
171
Severity breakdown
CRITICAL126HIGH2786MEDIUM1024LOW16

Vulnerabilities

Page 125 of 198
CVE-2021-36973P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.21832021-09-15
CVE-2021-36973 [HIGH] CWE-269 CVE-2021-36973: Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
nvd
CVE-2021-38630P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.21832021-09-15
CVE-2021-38630 [HIGH] CWE-269 CVE-2021-38630: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-36966P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.21832021-09-15
CVE-2021-36966 [HIGH] CWE-269 CVE-2021-36966: Windows Subsystem for Linux Elevation of Privilege Vulnerability Windows Subsystem for Linux Elevation of Privilege Vulnerability
nvd
CVE-2021-36964P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.21832021-09-15
CVE-2021-36964 [HIGH] CWE-269 CVE-2021-36964: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-36957P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.23002021-11-10
CVE-2021-36957 [HIGH] CWE-269 CVE-2021-36957: Windows Desktop Bridge Elevation of Privilege Vulnerability Windows Desktop Bridge Elevation of Privilege Vulnerability
nvd
CVE-2025-21331P3HIGHCVSS 7.3fixed in 10.0.17763.6775≥ 10.0.17763.0, < 10.0.17763.67752025-01-14
CVE-2025-21331 [HIGH] CWE-59 CVE-2025-21331: Windows Installer Elevation of Privilege Vulnerability Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2023-21820P3HIGHCVSS 7.4≥ 10.0.17763.0, < 10.0.17763.40102023-02-14
CVE-2023-21820 [HIGH] CWE-126 CVE-2023-21820: Windows Distributed File System (DFS) Remote Code Execution Vulnerability Windows Distributed File System (DFS) Remote Code Execution Vulnerability
nvd
CVE-2022-35757P3HIGHCVSS 7.3≥ 10.0.17763.0, < 10.0.17763.32872023-05-31
CVE-2022-35757 [HIGH] CVE-2022-35757: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-32021P3HIGHCVSS 7.1≥ 10.0.17763.0, < 10.0.17763.44992023-06-14
CVE-2023-32021 [HIGH] CVE-2023-32021: Windows SMB Witness Service Security Feature Bypass Vulnerability Windows SMB Witness Service Security Feature Bypass Vulnerability
nvd
CVE-2026-40413P3HIGHCVSS 7.4fixed in 10.0.17763.8755≥ 10.0.17763.0, < 10.0.17763.87552026-05-12
CVE-2026-40413 [HIGH] CWE-476 CVE-2026-40413: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an a Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.
cvelistv5nvd
CVE-2022-26818P3MEDIUMCVSS 6.6≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26818 [MEDIUM] CVE-2022-26818: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-24082P3MEDIUMCVSS 6.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24082 [MEDIUM] CVE-2021-24082: Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
nvd
CVE-2021-27063P3HIGHCVSS 7.5≥ 10.0.0, < publication2021-03-11
CVE-2021-27063 [HIGH] CVE-2021-27063: Windows DNS Server Denial of Service Vulnerability Windows DNS Server Denial of Service Vulnerability
nvd
CVE-2021-33779P3MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.17763.20612021-07-14
CVE-2021-33779 [MEDIUM] CVE-2021-33779: Windows AD FS Security Feature Bypass Vulnerability Windows AD FS Security Feature Bypass Vulnerability
nvd
CVE-2022-26829P3MEDIUMCVSS 6.6≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26829 [MEDIUM] CWE-362 CVE-2022-26829: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26821P3MEDIUMCVSS 6.6≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26821 [MEDIUM] CWE-362 CVE-2022-26821: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26822P3MEDIUMCVSS 6.6≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26822 [MEDIUM] CWE-362 CVE-2022-26822: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26819P3MEDIUMCVSS 6.6≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26819 [MEDIUM] CWE-362 CVE-2022-26819: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26820P3MEDIUMCVSS 6.6≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26820 [MEDIUM] CWE-362 CVE-2022-26820: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26817P3MEDIUMCVSS 6.6≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26817 [MEDIUM] CWE-362 CVE-2022-26817: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
Microsoft Windows Server 2019 vulnerabilities | cvebase