Microsoft Windows Server Version 2004 vulnerabilities

747 known vulnerabilities affecting microsoft/windows_server_version_2004.

Total CVEs
747
CISA KEV
27
actively exploited
Public exploits
10
Exploited in wild
28
Severity breakdown
CRITICAL32HIGH535MEDIUM177LOW3

Vulnerabilities

Page 28 of 38
CVE-2020-17043HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17043 [HIGH] CVE-2020-17043: Windows Remote Access Elevation of Privilege Vulnerability Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-17041HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17041 [HIGH] CVE-2020-17041: Windows Print Configuration Elevation of Privilege Vulnerability Windows Print Configuration Elevation of Privilege Vulnerability
nvd
CVE-2020-17075HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17075 [HIGH] CVE-2020-17075: Windows USO Core Worker Elevation of Privilege Vulnerability Windows USO Core Worker Elevation of Privilege Vulnerability
nvd
CVE-2020-17046MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17046 [MEDIUM] CVE-2020-17046: Windows Error Reporting Denial of Service Vulnerability Windows Error Reporting Denial of Service Vulnerability
nvd
CVE-2020-17013MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17013 [MEDIUM] Win32k Information Disclosure Vulnerability Win32k Information Disclosure Vulnerability Win32k Information Disclosure Vulnerability
cvelistv5
CVE-2020-17069MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17069 [MEDIUM] Windows NDIS Information Disclosure Vulnerability Windows NDIS Information Disclosure Vulnerability Windows NDIS Information Disclosure Vulnerability
cvelistv5
CVE-2020-16997MEDIUMCVSS 6.5≥ 10.0.0, < publication2020-11-11
CVE-2020-16997 [MEDIUM] CVE-2020-16997: Remote Desktop Protocol Server Information Disclosure Vulnerability Remote Desktop Protocol Server Information Disclosure Vulnerability
nvd
CVE-2020-17029MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17029 [MEDIUM] CVE-2020-17029: Windows Canonical Display Driver Information Disclosure Vulnerability Windows Canonical Display Driver Information Disclosure Vulnerability
nvd
CVE-2020-17004MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17004 [MEDIUM] CVE-2020-17004: Windows Graphics Component Information Disclosure Vulnerability Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2020-17030MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17030 [MEDIUM] CVE-2020-17030: Windows MSCTF Server Information Disclosure Vulnerability Windows MSCTF Server Information Disclosure Vulnerability
nvd
CVE-2020-17056MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17056 [MEDIUM] CVE-2020-17056: Windows Network File System Information Disclosure Vulnerability Windows Network File System Information Disclosure Vulnerability
nvd
CVE-2020-1599MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-1599 [MEDIUM] Windows Spoofing Vulnerability Windows Spoofing Vulnerability Windows Spoofing Vulnerability
cvelistv5
CVE-2020-17045MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17045 [MEDIUM] CVE-2020-17045: Windows KernelStream Information Disclosure Vulnerability Windows KernelStream Information Disclosure Vulnerability
nvd
CVE-2020-17036MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17036 [MEDIUM] CVE-2020-17036: Windows Function Discovery SSDP Provider Information Disclosure Vulnerability Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
nvd
CVE-2020-17071MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17071 [MEDIUM] CVE-2020-17071: Windows Delivery Optimization Information Disclosure Vulnerability Windows Delivery Optimization Information Disclosure Vulnerability
nvd
CVE-2020-16885HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16885 [HIGH] CVE-2020-16885: <p>An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly han An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted application
nvd
CVE-2020-16900HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16900 [HIGH] CVE-2020-16900: <p>An elevation of privilege vulnerability exists when the Windows Event System improperly handles o An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting ho
nvd
CVE-2020-16898HIGHCVSS 8.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16898 [HIGH] CVE-2020-16898: <p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICM A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client. To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Adverti
nvd
CVE-2020-16890HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16890 [HIGH] CVE-2020-16890: <p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle o An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability,
nvd
CVE-2020-16975HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16975 [HIGH] CVE-2020-16975: <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting ho
nvd