cbcvebase.

Microsoft Windows Server Version 20H2 vulnerabilities

965 known vulnerabilities affecting microsoft/windows_server_version_20h2.

Total CVEs
965
CISA KEV
39
actively exploited
Public exploits
32
Exploited in wild
53
Severity breakdown
CRITICAL44HIGH689MEDIUM229LOW3

Vulnerabilities

Page 12 of 49
CVE-2022-30145P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.17662022-06-15
CVE-2022-30145 [HIGH] CVE-2022-30145: Windows Encrypting File System (EFS) Remote Code Execution Vulnerability Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
nvd
CVE-2022-24495P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-24495 [HIGH] CVE-2022-24495: Windows Direct Show Remote Code Execution Vulnerability Windows Direct Show Remote Code Execution Vulnerability
nvd
CVE-2022-30194P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.18892022-08-09
CVE-2022-30194 [HIGH] CWE-94 CVE-2022-30194: Windows WebBrowser Control Remote Code Execution Vulnerability Windows WebBrowser Control Remote Code Execution Vulnerability
nvd
CVE-2022-35756P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.18892023-05-31
CVE-2022-35756 [HIGH] CVE-2022-35756: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-30150P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.17662022-06-15
CVE-2022-30150 [HIGH] CWE-287 CVE-2022-30150: Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability
nvd
CVE-2021-33754P3HIGHCVSS 8.0≥ 10.0.0, < 10.0.19042.11102021-07-14
CVE-2021-33754 [HIGH] CVE-2021-33754: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26811P3HIGHCVSS 7.2≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-26811 [HIGH] CVE-2022-26811: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26825P3HIGHCVSS 7.2≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-26825 [HIGH] CVE-2022-26825: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26823P3HIGHCVSS 7.2≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-26823 [HIGH] CVE-2022-26823: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-26824P3HIGHCVSS 7.2≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-26824 [HIGH] CVE-2022-26824: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2022-34702P3HIGHCVSS 8.1≥ 10.0.0, < 10.0.19042.18892022-08-09
CVE-2022-34702 [HIGH] CWE-362 CVE-2022-34702: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
nvd
CVE-2022-30140P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.17662022-06-15
CVE-2022-30140 [HIGH] CVE-2022-30140: Windows iSCSI Discovery Service Remote Code Execution Vulnerability Windows iSCSI Discovery Service Remote Code Execution Vulnerability
nvd
CVE-2022-24474P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-24474 [HIGH] CVE-2022-24474: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2022-32230P3HIGHCVSS 7.5≥ 19042.1706, < 19042.1706≥ 19043.1706, < 19043.1706+1 more2022-06-14
CVE-2022-32230 [HIGH] CWE-476 CVE-2022-32230: Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD) crash of the Windows kernel. For most systems, this attack requires authentication, except in
nvd
CVE-2022-30220P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.18262022-07-12
CVE-2022-30220 [HIGH] CVE-2022-30220: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21974P3HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.15262022-02-09
CVE-2022-21974 [HIGH] CVE-2022-21974: Roaming Security Rights Management Services Remote Code Execution Vulnerability Roaming Security Rights Management Services Remote Code Execution Vulnerability
nvd
CVE-2021-34442P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34442 [HIGH] CVE-2021-34442: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-26882P3HIGHCVSS 7.8≥ 10.0.0, < publication2021-03-11
CVE-2021-26882 [HIGH] CVE-2021-26882: Remote Access API Elevation of Privilege Vulnerability Remote Access API Elevation of Privilege Vulnerability
nvd
CVE-2022-24545P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.16452022-04-15
CVE-2022-24545 [HIGH] CVE-2022-24545: Windows Kerberos Remote Code Execution Vulnerability Windows Kerberos Remote Code Execution Vulnerability
nvd
CVE-2022-30149P3HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.17662022-06-15
CVE-2022-30149 [HIGH] CVE-2022-30149: Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
nvd
← Previous12 / 49Next →
Microsoft Windows Server Version 20H2 vulnerabilities | cvebase