Microsoft Windows Server Version 2004 vulnerabilities
747 known vulnerabilities affecting microsoft/windows_server_version_2004.
Total CVEs
747
CISA KEV
27
actively exploited
Public exploits
10
Exploited in wild
28
Severity breakdown
CRITICAL32HIGH535MEDIUM177LOW3
Vulnerabilities
Page 28 of 38
CVE-2020-17043HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17043 [HIGH] CVE-2020-17043: Windows Remote Access Elevation of Privilege Vulnerability
Windows Remote Access Elevation of Privilege Vulnerability
nvd
CVE-2020-17041HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17041 [HIGH] CVE-2020-17041: Windows Print Configuration Elevation of Privilege Vulnerability
Windows Print Configuration Elevation of Privilege Vulnerability
nvd
CVE-2020-17075HIGHCVSS 7.8≥ 10.0.0, < publication2020-11-11
CVE-2020-17075 [HIGH] CVE-2020-17075: Windows USO Core Worker Elevation of Privilege Vulnerability
Windows USO Core Worker Elevation of Privilege Vulnerability
nvd
CVE-2020-17046MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17046 [MEDIUM] CVE-2020-17046: Windows Error Reporting Denial of Service Vulnerability
Windows Error Reporting Denial of Service Vulnerability
nvd
CVE-2020-17013MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17013 [MEDIUM] Win32k Information Disclosure Vulnerability
Win32k Information Disclosure Vulnerability
Win32k Information Disclosure Vulnerability
cvelistv5
CVE-2020-17069MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17069 [MEDIUM] Windows NDIS Information Disclosure Vulnerability
Windows NDIS Information Disclosure Vulnerability
Windows NDIS Information Disclosure Vulnerability
cvelistv5
CVE-2020-16997MEDIUMCVSS 6.5≥ 10.0.0, < publication2020-11-11
CVE-2020-16997 [MEDIUM] CVE-2020-16997: Remote Desktop Protocol Server Information Disclosure Vulnerability
Remote Desktop Protocol Server Information Disclosure Vulnerability
nvd
CVE-2020-17029MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17029 [MEDIUM] CVE-2020-17029: Windows Canonical Display Driver Information Disclosure Vulnerability
Windows Canonical Display Driver Information Disclosure Vulnerability
nvd
CVE-2020-17004MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17004 [MEDIUM] CVE-2020-17004: Windows Graphics Component Information Disclosure Vulnerability
Windows Graphics Component Information Disclosure Vulnerability
nvd
CVE-2020-17030MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17030 [MEDIUM] CVE-2020-17030: Windows MSCTF Server Information Disclosure Vulnerability
Windows MSCTF Server Information Disclosure Vulnerability
nvd
CVE-2020-17056MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17056 [MEDIUM] CVE-2020-17056: Windows Network File System Information Disclosure Vulnerability
Windows Network File System Information Disclosure Vulnerability
nvd
CVE-2020-1599MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-1599 [MEDIUM] Windows Spoofing Vulnerability
Windows Spoofing Vulnerability
Windows Spoofing Vulnerability
cvelistv5
CVE-2020-17045MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17045 [MEDIUM] CVE-2020-17045: Windows KernelStream Information Disclosure Vulnerability
Windows KernelStream Information Disclosure Vulnerability
nvd
CVE-2020-17036MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17036 [MEDIUM] CVE-2020-17036: Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
nvd
CVE-2020-17071MEDIUMCVSS 5.5≥ 10.0.0, < publication2020-11-11
CVE-2020-17071 [MEDIUM] CVE-2020-17071: Windows Delivery Optimization Information Disclosure Vulnerability
Windows Delivery Optimization Information Disclosure Vulnerability
nvd
CVE-2020-16885HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16885 [HIGH] CVE-2020-16885: <p>An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly han
An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges.
To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted application
nvd
CVE-2020-16900HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16900 [HIGH] CVE-2020-16900: <p>An elevation of privilege vulnerability exists when the Windows Event System improperly handles o
An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting ho
nvd
CVE-2020-16898HIGHCVSS 8.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16898 [HIGH] CVE-2020-16898: <p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICM
A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could gain the ability to execute code on the target server or client.
To exploit this vulnerability, an attacker would have to send specially crafted ICMPv6 Router Adverti
nvd
CVE-2020-16890HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16890 [HIGH] CVE-2020-16890: <p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle o
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability,
nvd
CVE-2020-16975HIGHCVSS 7.8≥ 10.0.0, < publication2020-10-16
CVE-2020-16975 [HIGH] CVE-2020-16975: <p>An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.
To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.
The security update addresses the vulnerability by correcting ho
nvd