Microsoft Windows Server 2019 vulnerabilities
3,952 known vulnerabilities affecting microsoft/windows_server_2019.
Total CVEs
3,952
CISA KEV
125
actively exploited
Public exploits
113
Exploited in wild
170
Severity breakdown
CRITICAL126HIGH2786MEDIUM1024LOW16
Vulnerabilities
Page 8 of 198
CVE-2020-16896P1HIGHCVSS 7.5ExploitedRansomware≥ 10.0.0, < publication2020-10-16
CVE-2020-16896 [HIGH] CVE-2020-16896: <p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker
An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.
To exploit this vulnerability, an attacker would need to run a
nvd
CVE-2019-1225P1HIGHCVSS 7.5ExploitedRansomware≥ 10.0.0, < publication2019-08-14
CVE-2019-1225 [HIGH] CWE-200 CVE-2019-1225: An information disclosure vulnerability exists when the Windows RDP server improperly discloses the
An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system.
To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially
nvd
CVE-2019-1224P1HIGHCVSS 7.5ExploitedRansomware≥ 10.0.0, < publication2019-08-14
CVE-2019-1224 [HIGH] CWE-200 CVE-2019-1224: An information disclosure vulnerability exists when the Windows RDP server improperly discloses the
An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system.
To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially
nvd
CVE-2021-43207P1HIGHCVSS 7.8ExploitedRansomware≥ 10.0.0, < 10.0.17763.23662021-12-15
CVE-2021-43207 [HIGH] CVE-2021-43207: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-35803P2HIGHCVSS 7.8Exploited≥ 10.0.17763.0, < 10.0.17763.34062022-09-13
CVE-2022-35803 [HIGH] CVE-2022-35803: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2026-25187P1HIGHCVSS 7.8Exploitedfixed in 10.0.17763.8511≥ 10.0.17763.0, < 10.0.17763.85112026-03-10
CVE-2026-25187 [HIGH] CWE-59 CVE-2026-25187: Improper link resolution before file access ('link following') in Winlogon allows an authorized atta
Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-45586P2HIGHCVSS 7.8Exploitedfixed in 10.0.17763.8880≥ 10.0.17763.0, < 10.0.17763.88802026-06-09
CVE-2026-45586 [HIGH] CWE-59 CVE-2026-45586: Improper link resolution before file access ('link following') in Windows Collaborative Translation
Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.
nvd
CVE-2024-38196P2HIGHCVSS 7.8Exploitedfixed in 10.0.17763.6189≥ 10.0.17763.0, < 10.0.17763.61892024-08-13
CVE-2024-38196 [HIGH] CWE-20 CVE-2024-38196: Windows Common Log File System Driver Elevation of Privilege Vulnerability
Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2023-21554P1CRITICALCVSS 9.8PoC≥ 10.0.17763.0, < 10.0.17763.42522023-04-11
CVE-2023-21554 [CRITICAL] CWE-20 CVE-2023-21554: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
nvd
CVE-2024-38100P2HIGHCVSS 7.8Exploitedfixed in 10.0.17763.6054≥ 10.0.17763.0, < 10.0.17763.60542024-07-09
CVE-2024-38100 [HIGH] CWE-284 CVE-2024-38100: Windows File Explorer Elevation of Privilege Vulnerability
Windows File Explorer Elevation of Privilege Vulnerability
nvd
CVE-2026-20931P2HIGHCVSS 8.0Exploitedfixed in 10.0.17763.8276≥ 10.0.17763.0, < 10.0.17763.82762026-01-13
CVE-2026-20931 [HIGH] CWE-73 CVE-2026-20931: External control of file name or path in Windows Telephony Service allows an authorized attacker to
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
nvd
CVE-2021-31969P2HIGHCVSS 7.8Exploited≥ 10.0.0, < 10.0.17763.19992021-06-08
CVE-2021-31969 [HIGH] CWE-269 CVE-2021-31969: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2025-24061P2HIGHCVSS 7.8Exploitedfixed in 10.0.17763.7009≥ 10.0.17763.0, < 10.0.17763.70092025-03-11
CVE-2025-24061 [HIGH] CWE-693 CVE-2025-24061: Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to by
Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.
nvd
CVE-2023-29324P2MEDIUMCVSS 6.5Exploited≥ 10.0.17763.0, < 10.0.17763.43772023-05-09
CVE-2023-29324 [MEDIUM] CWE-73 CVE-2023-29324: Windows MSHTML Platform Security Feature Bypass Vulnerability
Windows MSHTML Platform Security Feature Bypass Vulnerability
nvd
CVE-2023-28218P2HIGHCVSS 7.0Exploited≥ 10.0.17763.0, < 10.0.17763.42522023-04-11
CVE-2023-28218 [HIGH] CWE-122 CVE-2023-28218: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2018-8514P2MEDIUMCVSS 5.5Exploitedv(Server Core installation)2018-12-12
CVE-2018-8514 [MEDIUM] CWE-665 CVE-2018-8514: An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initial
An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server
nvd
CVE-2022-30170P2HIGHCVSS 7.3Exploited≥ 10.0.17763.0, < 10.0.17763.34062022-09-13
CVE-2022-30170 [HIGH] CVE-2022-30170: Windows Credential Roaming Service Elevation of Privilege Vulnerability
Windows Credential Roaming Service Elevation of Privilege Vulnerability
nvd
CVE-2024-38063P1CRITICALCVSS 9.8PoCfixed in 10.0.17763.6189≥ 10.0.17763.0, < 10.0.17763.62932024-08-13
CVE-2024-38063 [CRITICAL] CWE-191 CVE-2024-38063: Windows TCP/IP Remote Code Execution Vulnerability
Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2018-8595P2MEDIUMCVSS 6.5Exploitedv(Server Core installation)2018-12-12
CVE-2018-8595 [MEDIUM] CVE-2018-8595: An information disclosure vulnerability exists when the Windows GDI component improperly discloses t
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 20
nvd
CVE-2018-8637P2MEDIUMCVSS 5.5Exploitedv(Server Core installation)2018-12-12
CVE-2018-8637 [MEDIUM] CVE-2018-8637: An information disclosure vulnerability exists in Windows kernel that could allow an attacker to ret
An information disclosure vulnerability exists in Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass, aka "Win32k Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.
nvd