cbcvebase.

Microsoft Windows Server Version 2004 vulnerabilities

747 known vulnerabilities affecting microsoft/windows_server_version_2004.

Total CVEs
747
CISA KEV
27
actively exploited
Public exploits
20
Exploited in wild
36
Severity breakdown
CRITICAL32HIGH535MEDIUM177LOW3

Vulnerabilities

Page 20 of 38
CVE-2021-26425P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11652021-08-12
CVE-2021-26425 [HIGH] CWE-59 CVE-2021-26425: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2020-17070P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17070 [HIGH] CVE-2020-17070: Windows Update Medic Service Elevation of Privilege Vulnerability Windows Update Medic Service Elevation of Privilege Vulnerability
nvd
CVE-2020-1584P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-08-17
CVE-2020-1584 [HIGH] CVE-2020-1584: An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in m An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability
nvd
CVE-2020-17073P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17073 [HIGH] CVE-2020-17073: Windows Update Orchestrator Service Elevation of Privilege Vulnerability Windows Update Orchestrator Service Elevation of Privilege Vulnerability
nvd
CVE-2020-16936P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16936 [HIGH] CVE-2020-16936: <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting ho
nvd
CVE-2020-16980P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16980 [HIGH] CVE-2020-16980: <p>An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly h An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted applicati
nvd
CVE-2020-17076P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17076 [HIGH] CVE-2020-17076: Windows Update Orchestrator Service Elevation of Privilege Vulnerability Windows Update Orchestrator Service Elevation of Privilege Vulnerability
nvd
CVE-2020-16973P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16973 [HIGH] CVE-2020-16973: <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting ho
nvd
CVE-2021-26898P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19043.8672021-03-11
CVE-2021-26898 [HIGH] CVE-2021-26898: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-42277P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.13482021-11-10
CVE-2021-42277 [HIGH] CWE-269 CVE-2021-42277: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
nvd
CVE-2021-26875P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19043.8672021-03-11
CVE-2021-26875 [HIGH] CVE-2021-26875: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2020-1579P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-08-17
CVE-2020-1579 [HIGH] CVE-2020-1579: An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider imp An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correc
nvd
CVE-2020-1550P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-08-17
CVE-2020-1550 [HIGH] CVE-2020-1550: An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handl An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the W
nvd
CVE-2021-26878P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19043.8672021-03-11
CVE-2021-26878 [HIGH] CVE-2021-26878: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-34462P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11102021-07-16
CVE-2021-34462 [HIGH] CWE-362 CVE-2021-34462: Windows AppX Deployment Extensions Elevation of Privilege Vulnerability Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
nvd
CVE-2021-26874P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19043.8672021-03-11
CVE-2021-26874 [HIGH] CVE-2021-26874: Windows Overlay Filter Elevation of Privilege Vulnerability Windows Overlay Filter Elevation of Privilege Vulnerability
nvd
CVE-2020-1590P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1590 [HIGH] CVE-2020-1590: <p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a sp
nvd
CVE-2021-1651P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-01-12
CVE-2021-1651 [HIGH] CWE-269 CVE-2021-1651: Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
nvd
CVE-2021-33751P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11102021-07-14
CVE-2021-33751 [HIGH] CWE-269 CVE-2021-33751: Windows Storage Spaces Controller Elevation of Privilege Vulnerability Windows Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2021-26901P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19043.8672021-03-11
CVE-2021-26901 [HIGH] CVE-2021-26901: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
Microsoft Windows Server Version 2004 vulnerabilities | cvebase