Microsoft Windows Server Version 2004 vulnerabilities
747 known vulnerabilities affecting microsoft/windows_server_version_2004.
Total CVEs
747
CISA KEV
27
actively exploited
Public exploits
20
Exploited in wild
35
Severity breakdown
CRITICAL32HIGH535MEDIUM177LOW3
Vulnerabilities
Page 24 of 38
CVE-2021-40477P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.12882021-10-13
CVE-2021-40477 [HIGH] CWE-269 CVE-2021-40477: Windows Event Tracing Elevation of Privilege Vulnerability
Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-28314P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-04-13
CVE-2021-28314 [HIGH] CVE-2021-28314: Windows Hyper-V Elevation of Privilege Vulnerability
Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2021-33759P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11102021-07-14
CVE-2021-33759 [HIGH] CVE-2021-33759: Windows Desktop Bridge Elevation of Privilege Vulnerability
Windows Desktop Bridge Elevation of Privilege Vulnerability
nvd
CVE-2021-33743P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11102021-07-14
CVE-2021-33743 [HIGH] CVE-2021-33743: Windows Projected File System Elevation of Privilege Vulnerability
Windows Projected File System Elevation of Privilege Vulnerability
nvd
CVE-2021-43240P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.14152021-12-15
CVE-2021-43240 [HIGH] CVE-2021-43240: NTFS Set Short Name Elevation of Privilege Vulnerability
NTFS Set Short Name Elevation of Privilege Vulnerability
nvd
CVE-2021-34536P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11652021-08-12
CVE-2021-34536 [HIGH] CWE-190 CVE-2021-34536: Storage Spaces Controller Elevation of Privilege Vulnerability
Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2021-31973P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.10522021-06-08
CVE-2021-31973 [HIGH] CVE-2021-31973: Windows GPSVC Elevation of Privilege Vulnerability
Windows GPSVC Elevation of Privilege Vulnerability
nvd
CVE-2021-31193P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.9822021-05-11
CVE-2021-31193 [HIGH] CVE-2021-31193: Windows SSDP Service Elevation of Privilege Vulnerability
Windows SSDP Service Elevation of Privilege Vulnerability
nvd
CVE-2021-34460P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11102021-07-16
CVE-2021-34460 [HIGH] CWE-269 CVE-2021-34460: Storage Spaces Controller Elevation of Privilege Vulnerability
Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2021-34511P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11102021-07-14
CVE-2021-34511 [HIGH] CWE-269 CVE-2021-34511: Windows Installer Elevation of Privilege Vulnerability
Windows Installer Elevation of Privilege Vulnerability
nvd
CVE-2021-34488P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11102021-07-14
CVE-2021-34488 [HIGH] CWE-269 CVE-2021-34488: Windows Console Driver Elevation of Privilege Vulnerability
Windows Console Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-34455P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.11102021-07-16
CVE-2021-34455 [HIGH] CWE-269 CVE-2021-34455: Windows File History Service Elevation of Privilege Vulnerability
Windows File History Service Elevation of Privilege Vulnerability
nvd
CVE-2021-38638P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.12372021-09-15
CVE-2021-38638 [HIGH] CWE-269 CVE-2021-38638: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2021-36954P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.12372021-09-15
CVE-2021-36954 [HIGH] CWE-269 CVE-2021-36954: Windows Bind Filter Driver Elevation of Privilege Vulnerability
Windows Bind Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-38628P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.12372021-09-15
CVE-2021-38628 [HIGH] CWE-269 CVE-2021-38628: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
nvd
CVE-2021-41366P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19041.13482021-11-10
CVE-2021-41366 [HIGH] CWE-269 CVE-2021-41366: Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
nvd
CVE-2021-26896P3HIGHCVSS 7.5≥ 10.0.0, < publication2021-03-11
CVE-2021-26896 [HIGH] CVE-2021-26896: Windows DNS Server Denial of Service Vulnerability
Windows DNS Server Denial of Service Vulnerability
nvd
CVE-2021-28439P3HIGHCVSS 7.5≥ 10.0.0, < publication2021-04-13
CVE-2021-28439 [HIGH] CVE-2021-28439: Windows TCP/IP Driver Denial of Service Vulnerability
Windows TCP/IP Driver Denial of Service Vulnerability
nvd
CVE-2020-1577P3MEDIUMCVSS 6.5≥ 10.0.0, < publication2020-08-17
CVE-2020-1577 [MEDIUM] CVE-2020-1577: An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system.
There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted
nvd
CVE-2020-1507P3HIGHCVSS 7.8≥ 10.0.0, < publication2020-09-11
CVE-2020-1507 [HIGH] CVE-2020-1507: <p>An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles
An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.
To exploit the vulnerability, a user would have to open a specially crafted file.
The security update addresses the vulnerability by corre
nvd