Microsoft Windows Server Version 20H2 vulnerabilities
965 known vulnerabilities affecting microsoft/windows_server_version_20h2.
Total CVEs
965
CISA KEV
39
actively exploited
Public exploits
32
Exploited in wild
53
Severity breakdown
CRITICAL44HIGH689MEDIUM229LOW3
Vulnerabilities
Page 38 of 49
CVE-2021-41337P4MEDIUMCVSS 4.9≥ 10.0.0, < 10.0.19042.12882021-10-13
CVE-2021-41337 [MEDIUM] CVE-2021-41337: Active Directory Security Feature Bypass Vulnerability
Active Directory Security Feature Bypass Vulnerability
nvd
CVE-2021-43224P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.19042.14152021-12-15
CVE-2021-43224 [MEDIUM] CVE-2021-43224: Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2021-27079P4MEDIUMCVSS 5.7≥ 10.0.0, < publication2021-04-13
CVE-2021-27079 [MEDIUM] CVE-2021-27079: Windows Media Photo Codec Information Disclosure Vulnerability
Windows Media Photo Codec Information Disclosure Vulnerability
nvd
CVE-2021-26866P4MEDIUMCVSS 6.1≥ 10.0.0, < publication2021-03-11
CVE-2021-26866 [MEDIUM] CWE-59 CVE-2021-26866: Windows Update Service Elevation of Privilege Vulnerability
Windows Update Service Elevation of Privilege Vulnerability
nvd
CVE-2022-24503P4MEDIUMCVSS 5.3≥ 10.0.0, < 10.0.19042.15862022-03-09
CVE-2022-24503 [MEDIUM] CVE-2022-24503: Remote Desktop Protocol Client Information Disclosure Vulnerability
Remote Desktop Protocol Client Information Disclosure Vulnerability
nvd
CVE-2021-1645P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-01-12
CVE-2021-1645 [MEDIUM] CVE-2021-1645: Windows Docker Information Disclosure Vulnerability
Windows Docker Information Disclosure Vulnerability
nvd
CVE-2021-1638P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-01-12
CVE-2021-1638 [MEDIUM] CVE-2021-1638: Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For
Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.
To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the remote device exchanges a public key with the same X coordinate
nvd
CVE-2021-1731P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-02-25
CVE-2021-1731 [MEDIUM] CWE-522 CVE-2021-1731: PFX Encryption Security Feature Bypass Vulnerability
PFX Encryption Security Feature Bypass Vulnerability
nvd
CVE-2021-24075P4MEDIUMCVSS 6.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24075 [MEDIUM] CVE-2021-24075: Microsoft Windows VMSwitch Denial of Service Vulnerability
Microsoft Windows VMSwitch Denial of Service Vulnerability
nvd
CVE-2021-24080P4MEDIUMCVSS 6.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24080 [MEDIUM] CVE-2021-24080: Windows Trust Verification API Denial of Service Vulnerability
Windows Trust Verification API Denial of Service Vulnerability
nvd
CVE-2022-21877P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.19042.14662022-01-11
CVE-2022-21877 [MEDIUM] CWE-125 CVE-2022-21877: Storage Spaces Controller Information Disclosure Vulnerability
Storage Spaces Controller Information Disclosure Vulnerability
nvd
CVE-2022-35747P4MEDIUMCVSS 5.9≥ 10.0.0, < 10.0.19042.18892023-05-31
CVE-2022-35747 [MEDIUM] CVE-2022-35747: Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
nvd
CVE-2021-31961P4MEDIUMCVSS 6.1≥ 10.0.0, < 10.0.19042.11102021-07-14
CVE-2021-31961 [MEDIUM] CWE-269 CVE-2021-31961: Windows InstallService Elevation of Privilege Vulnerability
Windows InstallService Elevation of Privilege Vulnerability
nvd
CVE-2021-31188P4MEDIUMCVSS 5.5≥ 10.0.0, < 10.0.19042.9822021-05-11
CVE-2021-31188 [MEDIUM] CWE-416 CVE-2021-31188: Windows Graphics Component Elevation of Privilege Vulnerability
Windows Graphics Component Elevation of Privilege Vulnerability
nvd
CVE-2022-26935P4MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.19042.17062022-05-10
CVE-2022-26935 [MEDIUM] CVE-2022-26935: Windows WLAN AutoConfig Service Information Disclosure Vulnerability
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
nvd
CVE-2022-29120P4MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.19042.17062022-05-10
CVE-2022-29120 [MEDIUM] CVE-2022-29120: Windows Clustered Shared Volume Information Disclosure Vulnerability
Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2022-29134P4MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.19042.17062022-05-10
CVE-2022-29134 [MEDIUM] CVE-2022-29134: Windows Clustered Shared Volume Information Disclosure Vulnerability
Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2022-29122P4MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.19042.17062022-05-10
CVE-2022-29122 [MEDIUM] CVE-2022-29122: Windows Clustered Shared Volume Information Disclosure Vulnerability
Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2022-29123P4MEDIUMCVSS 6.5≥ 10.0.0, < 10.0.19042.17062022-05-10
CVE-2022-29123 [MEDIUM] CVE-2022-29123: Windows Clustered Shared Volume Information Disclosure Vulnerability
Windows Clustered Shared Volume Information Disclosure Vulnerability
nvd
CVE-2021-1656P4MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-01-12
CVE-2021-1656 [MEDIUM] CVE-2021-1656: TPM Device Driver Information Disclosure Vulnerability
TPM Device Driver Information Disclosure Vulnerability
nvd