Microsoft Windows Server Version 20H2 vulnerabilities

966 known vulnerabilities affecting microsoft/windows_server_version_20h2.

Total CVEs
966
CISA KEV
39
actively exploited
Public exploits
17
Exploited in wild
44
Severity breakdown
CRITICAL44HIGH690MEDIUM229LOW3

Vulnerabilities

Page 29 of 49
CVE-2021-36948HIGHCVSS 7.8KEV≥ 10.0.0, < 10.0.19042.11652021-08-12
CVE-2021-36948 [HIGH] CVE-2021-36948: Windows Update Medic Service Elevation of Privilege Vulnerability Windows Update Medic Service Elevation of Privilege Vulnerability
nvd
CVE-2021-34483HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11652021-08-12
CVE-2021-34483 [HIGH] CWE-269 CVE-2021-34483: Windows Print Spooler Elevation of Privilege Vulnerability Windows Print Spooler Elevation of Privilege Vulnerability
nvd
CVE-2021-36932HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.11652021-08-12
CVE-2021-36932 [HIGH] CVE-2021-36932: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
nvd
CVE-2021-26431HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11652021-08-12
CVE-2021-26431 [HIGH] CVE-2021-26431: Windows Recovery Environment Agent Elevation of Privilege Vulnerability Windows Recovery Environment Agent Elevation of Privilege Vulnerability
nvd
CVE-2021-36958HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.12372021-08-12
CVE-2021-36958 [HIGH] CVE-2021-36958: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly pe A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
nvd
CVE-2021-34487HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11652021-08-12
CVE-2021-34487 [HIGH] CWE-269 CVE-2021-34487: Windows Event Tracing Elevation of Privilege Vulnerability Windows Event Tracing Elevation of Privilege Vulnerability
nvd
CVE-2021-26433HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.11652021-08-12
CVE-2021-26433 [HIGH] CVE-2021-26433: Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
nvd
CVE-2021-34450CRITICALCVSS 9.9≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34450 [CRITICAL] CVE-2021-34450: Windows Hyper-V Remote Code Execution Vulnerability Windows Hyper-V Remote Code Execution Vulnerability
nvd
CVE-2021-34458CRITICALCVSS 9.9≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34458 [CRITICAL] CVE-2021-34458: Windows Kernel Remote Code Execution Vulnerability Windows Kernel Remote Code Execution Vulnerability
nvd
CVE-2021-34481CRITICALCVSS 9.8≥ 10.0.0, < 10.0.19042.11652021-07-16
CVE-2021-34481 [CRITICAL] CWE-269 CVE-2021-34481: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly pe A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user r
nvd
CVE-2021-34441HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34441 [HIGH] CVE-2021-34441: Microsoft Windows Media Foundation Remote Code Execution Vulnerability Microsoft Windows Media Foundation Remote Code Execution Vulnerability
nvd
CVE-2021-34461HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34461 [HIGH] CWE-269 CVE-2021-34461: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
nvd
CVE-2021-34460HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34460 [HIGH] CWE-269 CVE-2021-34460: Storage Spaces Controller Elevation of Privilege Vulnerability Storage Spaces Controller Elevation of Privilege Vulnerability
nvd
CVE-2021-34449HIGHCVSS 7.0≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34449 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability
cvelistv5
CVE-2021-34459HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34459 [HIGH] CWE-269 CVE-2021-34459: Windows AppContainer Elevation Of Privilege Vulnerability Windows AppContainer Elevation Of Privilege Vulnerability
nvd
CVE-2021-34442HIGHCVSS 7.5≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34442 [HIGH] CVE-2021-34442: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-34462HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34462 [HIGH] CWE-362 CVE-2021-34462: Windows AppX Deployment Extensions Elevation of Privilege Vulnerability Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
nvd
CVE-2021-34438HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34438 [HIGH] CVE-2021-34438: Windows Font Driver Host Remote Code Execution Vulnerability Windows Font Driver Host Remote Code Execution Vulnerability
nvd
CVE-2021-34455HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34455 [HIGH] CWE-269 CVE-2021-34455: Windows File History Service Elevation of Privilege Vulnerability Windows File History Service Elevation of Privilege Vulnerability
nvd
CVE-2021-34445HIGHCVSS 7.8≥ 10.0.0, < 10.0.19042.11102021-07-16
CVE-2021-34445 [HIGH] CVE-2021-34445: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
nvd