cbcvebase.

Microsoft Windows Server 2019 vulnerabilities

3,952 known vulnerabilities affecting microsoft/windows_server_2019.

Total CVEs
3,952
CISA KEV
125
actively exploited
Public exploits
113
Exploited in wild
171
Severity breakdown
CRITICAL126HIGH2786MEDIUM1024LOW16

Vulnerabilities

Page 53 of 198
CVE-2024-38124P3CRITICALCVSS 9.0fixed in 10.0.17763.6414≥ 10.0.17763.0, < 10.0.17763.64142024-10-08
CVE-2024-38124 [CRITICAL] CWE-287 CVE-2024-38124: Windows Netlogon Elevation of Privilege Vulnerability Windows Netlogon Elevation of Privilege Vulnerability
nvd
CVE-2024-26211P3HIGHCVSS 7.8fixed in 10.0.17763.5820≥ 10.0.17763.0, < 10.0.17763.58202024-04-09
CVE-2024-26211 [HIGH] CWE-122 CVE-2024-26211: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd
CVE-2022-37975P3HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.35322022-10-11
CVE-2022-37975 [HIGH] CVE-2022-37975: Windows Group Policy Elevation of Privilege Vulnerability Windows Group Policy Elevation of Privilege Vulnerability
nvd
CVE-2022-37970P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.35322022-10-11
CVE-2022-37970 [HIGH] CVE-2022-37970: Windows DWM Core Library Elevation of Privilege Vulnerability Windows DWM Core Library Elevation of Privilege Vulnerability
nvd
CVE-2022-24542P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-24542 [HIGH] CVE-2022-24542: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2024-49105P3HIGHCVSS 8.4fixed in 10.0.17763.6659≥ 10.0.17763.0, < 10.0.17763.66592024-12-12
CVE-2024-49105 [HIGH] CWE-284 CVE-2024-49105: Remote Desktop Client Remote Code Execution Vulnerability Remote Desktop Client Remote Code Execution Vulnerability
nvd
CVE-2025-49723P3HIGHCVSS 8.8fixed in 10.0.17763.7558≥ 10.0.17763.0, < 10.0.17763.75582025-07-08
CVE-2025-49723 [HIGH] CWE-862 CVE-2025-49723: Missing authorization in Windows StateRepository API allows an authorized attacker to perform tamper Missing authorization in Windows StateRepository API allows an authorized attacker to perform tampering locally.
nvd
CVE-2022-26826P3HIGHCVSS 7.2≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26826 [HIGH] CWE-77 CVE-2022-26826: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-35830P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.34062022-09-13
CVE-2022-35830 [HIGH] CVE-2022-35830: Remote Procedure Call Runtime Remote Code Execution Vulnerability Remote Procedure Call Runtime Remote Code Execution Vulnerability
nvd
CVE-2022-35767P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.32872022-08-09
CVE-2022-35767 [HIGH] CWE-94 CVE-2022-35767: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-35766P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.32872022-08-09
CVE-2022-35766 [HIGH] CWE-94 CVE-2022-35766: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-41081P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.35322022-10-11
CVE-2022-41081 [HIGH] CVE-2022-41081: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-26812P3HIGHCVSS 7.2≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26812 [HIGH] CVE-2022-26812: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-24536P3HIGHCVSS 7.2≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-24536 [HIGH] CVE-2022-24536: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26815P3HIGHCVSS 7.2≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26815 [HIGH] CVE-2022-26815: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26813P3HIGHCVSS 7.2≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26813 [HIGH] CVE-2022-26813: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-38000P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.35322022-10-11
CVE-2022-38000 [HIGH] CWE-362 CVE-2022-38000: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2022-22035P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.35322022-10-11
CVE-2022-22035 [HIGH] CWE-362 CVE-2022-22035: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
nvd
CVE-2023-21546P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.38872023-01-10
CVE-2023-21546 [HIGH] CWE-591 CVE-2023-21546: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
CVE-2023-21679P3HIGHCVSS 8.1≥ 10.0.17763.0, < 10.0.17763.38872023-01-10
CVE-2023-21679 [HIGH] CWE-416 CVE-2023-21679: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
nvd
← Previous53 / 198Next →
Microsoft Windows Server 2019 vulnerabilities | cvebase