Microsoft Windows Server 2019 vulnerabilities
3,952 known vulnerabilities affecting microsoft/windows_server_2019.
Total CVEs
3,952
CISA KEV
125
actively exploited
Public exploits
113
Exploited in wild
171
Severity breakdown
CRITICAL126HIGH2786MEDIUM1024LOW16
Vulnerabilities
Page 92 of 198
CVE-2026-45653P3HIGHCVSS 7.0fixed in 10.0.17763.8880≥ 10.0.17763.0, < 10.0.17763.88802026-06-09
CVE-2026-45653 [HIGH] CWE-122 CVE-2026-45653: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2025-26635P3MEDIUMCVSS 6.5fixed in 10.0.17763.7136≥ 10.0.17763.0, < 10.0.17763.71362025-04-08
CVE-2025-26635 [MEDIUM] CWE-1390 CVE-2025-26635: Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network.
nvd
CVE-2025-49670P3MEDIUMCVSS 6.5fixed in 10.0.17763.7558≥ 10.0.17763.0, < 10.0.17763.75582025-07-08
CVE-2025-49670 [MEDIUM] CWE-122 CVE-2025-49670: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-1710P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1710 [HIGH] CVE-2021-1710: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-31976P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.17763.19992021-06-08
CVE-2021-31976 [HIGH] CVE-2021-31976: Server for NFS Information Disclosure Vulnerability
Server for NFS Information Disclosure Vulnerability
nvd
CVE-2021-31975P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.17763.19992021-06-08
CVE-2021-31975 [HIGH] CVE-2021-31975: Server for NFS Information Disclosure Vulnerability
Server for NFS Information Disclosure Vulnerability
nvd
CVE-2020-1473P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-08-17
CVE-2020-1473 [HIGH] CVE-2020-1473: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.
An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.
The update addresses the vulnerabili
nvd
CVE-2022-29105P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.29282022-05-10
CVE-2022-29105 [HIGH] CVE-2022-29105: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-24083P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24083 [HIGH] CWE-787 CVE-2021-24083: Windows Address Book Remote Code Execution Vulnerability
Windows Address Book Remote Code Execution Vulnerability
nvd
CVE-2021-24081P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24081 [HIGH] CWE-787 CVE-2021-24081: Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
nvd
CVE-2021-40465P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.22372021-10-13
CVE-2021-40465 [HIGH] CVE-2021-40465: Windows Text Shaping Remote Code Execution Vulnerability
Windows Text Shaping Remote Code Execution Vulnerability
nvd
CVE-2021-42276P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.23002021-11-10
CVE-2021-42276 [HIGH] CVE-2021-42276: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-34533P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.21142021-08-12
CVE-2021-34533 [HIGH] CVE-2021-34533: Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
nvd
CVE-2021-34503P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.20612021-07-14
CVE-2021-34503 [HIGH] CVE-2021-34503: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-43232P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.23662021-12-15
CVE-2021-43232 [HIGH] CVE-2021-43232: Windows Event Tracing Remote Code Execution Vulnerability
Windows Event Tracing Remote Code Execution Vulnerability
nvd
CVE-2021-34441P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.17763.20612021-07-16
CVE-2021-34441 [HIGH] CVE-2021-34441: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-34500P3HIGHCVSS 7.7≥ 10.0.0, < 10.0.17763.20612021-07-14
CVE-2021-34500 [HIGH] CVE-2021-34500: Windows Kernel Memory Information Disclosure Vulnerability
Windows Kernel Memory Information Disclosure Vulnerability
nvd
CVE-2022-26917P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26917 [HIGH] CVE-2022-26917: Windows Fax Compose Form Remote Code Execution Vulnerability
Windows Fax Compose Form Remote Code Execution Vulnerability
nvd
CVE-2022-26918P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26918 [HIGH] CVE-2022-26918: Windows Fax Compose Form Remote Code Execution Vulnerability
Windows Fax Compose Form Remote Code Execution Vulnerability
nvd
CVE-2022-26916P3HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.28032022-04-15
CVE-2022-26916 [HIGH] CVE-2022-26916: Windows Fax Compose Form Remote Code Execution Vulnerability
Windows Fax Compose Form Remote Code Execution Vulnerability
nvd