cbcvebase.

Microsoft Windows Server 2019 vulnerabilities

3,952 known vulnerabilities affecting microsoft/windows_server_2019.

Total CVEs
3,952
CISA KEV
125
actively exploited
Public exploits
113
Exploited in wild
171
Severity breakdown
CRITICAL126HIGH2786MEDIUM1024LOW16

Vulnerabilities

Page 169 of 198
CVE-2026-50310P4MEDIUMCVSS 4.7fixed in 10.0.17763.9020≥ 10.0.17763.0, < 10.0.17763.90202026-07-14
CVE-2026-50310 [MEDIUM] CWE-190 CVE-2026-50310: Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to d Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally.
nvd
CVE-2022-34728P4MEDIUMCVSS 5.5≥ 10.0.17763.0, < 10.0.17763.34062022-09-13
CVE-2022-34728 [MEDIUM] CVE-2022-34728: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2022-26935P4MEDIUMCVSS 6.5≥ 10.0.17763.0, < 10.0.17763.29282022-05-10
CVE-2022-26935 [MEDIUM] CVE-2022-26935: Windows WLAN AutoConfig Service Information Disclosure Vulnerability Windows WLAN AutoConfig Service Information Disclosure Vulnerability
nvd
CVE-2023-36908P4MEDIUMCVSS 6.5≥ 10.0.17763.0, < 10.0.17763.47372023-08-08
CVE-2023-36908 [MEDIUM] CWE-200 CVE-2023-36908: Windows Hyper-V Information Disclosure Vulnerability Windows Hyper-V Information Disclosure Vulnerability
nvd
CVE-2022-29120P4MEDIUMCVSS 6.5≥ 10.0.17763.0, < 10.0.17763.29282022-05-10
CVE-2022-29120 [MEDIUM] CVE-2022-29120: Windows Clustered Shared Volume Information Disclosure Vulnerability Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2022-29134P4MEDIUMCVSS 6.5≥ 10.0.17763.0, < 10.0.17763.29282022-05-10
CVE-2022-29134 [MEDIUM] CVE-2022-29134: Windows Clustered Shared Volume Information Disclosure Vulnerability Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2022-29122P4MEDIUMCVSS 6.5≥ 10.0.17763.0, < 10.0.17763.29282022-05-10
CVE-2022-29122 [MEDIUM] CVE-2022-29122: Windows Clustered Shared Volume Information Disclosure Vulnerability Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2022-29123P4MEDIUMCVSS 6.5≥ 10.0.17763.0, < 10.0.17763.29282022-05-10
CVE-2022-29123 [MEDIUM] CVE-2022-29123: Windows Clustered Shared Volume Information Disclosure Vulnerability Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2018-8454P4MEDIUMCVSS 5.5v(Server Core installation)2018-11-14
CVE-2018-8454 [MEDIUM] CWE-200 CVE-2018-8454: An information disclosure vulnerability exists when Windows Audio Service fails to properly handle o An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio Service Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.
nvd
CVE-2021-1656P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-01-12
CVE-2021-1656 [MEDIUM] CVE-2021-1656: TPM Device Driver Information Disclosure Vulnerability TPM Device Driver Information Disclosure Vulnerability
nvd
CVE-2021-24084P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.17763.23662021-02-25
CVE-2021-24084 [MEDIUM] CWE-59 CVE-2021-24084: Windows Mobile Device Management Information Disclosure Vulnerability Windows Mobile Device Management Information Disclosure Vulnerability
nvd
CVE-2018-8330P4MEDIUMCVSS 5.5v(Server Core installation)2018-10-10
CVE-2018-8330 [MEDIUM] CWE-200 CVE-2018-8330: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2,
nvd
CVE-2019-0553P4MEDIUMCVSS 5.5v(Server Core installation)2019-01-08
CVE-2019-0553 [MEDIUM] CVE-2019-0553: An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles o An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.
nvd
CVE-2019-1078P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2019-08-14
CVE-2019-1078 [MEDIUM] CWE-200 CVE-2019-1078: An information disclosure vulnerability exists when the Windows Graphics component improperly handle An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by running a specially crafted application. The u
nvd
CVE-2020-1474P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-08-17
CVE-2020-1474 [MEDIUM] CVE-2020-1474: An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service impr An information disclosure vulnerability exists when the Windows Image Acquisition (WIA) Service improperly discloses contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, an authenticated attacker could connect an imaging device (camera,
nvd
CVE-2019-1039P4MEDIUMCVSS 5.5≥ 10.0.17763.0, < publication2019-06-12
CVE-2019-1039 [MEDIUM] CWE-665 CVE-2019-1039: An information disclosure vulnerability exists when the Windows kernel improperly initializes object An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. The update addre
nvd
CVE-2020-1033P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-09-11
CVE-2020-1033 [MEDIUM] CVE-2020-1033: <p>An information disclosure vulnerability exists when the Windows kernel improperly handles objects An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by running a specially crafted application. The update addresses the
nvd
CVE-2022-21906P4MEDIUMCVSS 5.5≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21906 [MEDIUM] CVE-2022-21906: Windows Defender Application Control Security Feature Bypass Vulnerability Windows Defender Application Control Security Feature Bypass Vulnerability
nvd
CVE-2020-16879P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-09-11
CVE-2020-16879 [MEDIUM] CVE-2020-16879: <p>An information disclosure vulnerability exists when a Windows Projected Filesystem improperly han An information disclosure vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user's system To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a s
nvd
CVE-2023-36801P4MEDIUMCVSS 5.3≥ 10.0.17763.0, < 10.0.17763.48512023-09-12
CVE-2023-36801 [MEDIUM] CWE-126 CVE-2023-36801: DHCP Server Service Information Disclosure Vulnerability DHCP Server Service Information Disclosure Vulnerability
nvd
Microsoft Windows Server 2019 vulnerabilities | cvebase