Microsoft Windows Server Version 20H2 vulnerabilities

966 known vulnerabilities affecting microsoft/windows_server_version_20h2.

Total CVEs
966
CISA KEV
39
actively exploited
Public exploits
17
Exploited in wild
44
Severity breakdown
CRITICAL44HIGH690MEDIUM229LOW3

Vulnerabilities

Page 41 of 49
CVE-2021-26891HIGHCVSS 7.8≥ 10.0.0, < publication2021-03-11
CVE-2021-26891 [HIGH] CVE-2021-26891: Windows Container Execution Agent Elevation of Privilege Vulnerability Windows Container Execution Agent Elevation of Privilege Vulnerability
nvd
CVE-2021-1729HIGHCVSS 7.8≥ 10.0.0, < publication2021-03-11
CVE-2021-1729 [HIGH] CWE-269 CVE-2021-1729: Windows Update Stack Setup Elevation of Privilege Vulnerability Windows Update Stack Setup Elevation of Privilege Vulnerability
nvd
CVE-2021-26890HIGHCVSS 7.8≥ 10.0.0, < publication2021-03-11
CVE-2021-26890 [HIGH] CVE-2021-26890: Application Virtualization Remote Code Execution Vulnerability Application Virtualization Remote Code Execution Vulnerability
nvd
CVE-2021-26866MEDIUMCVSS 6.1≥ 10.0.0, < publication2021-03-11
CVE-2021-26866 [MEDIUM] CWE-59 CVE-2021-26866: Windows Update Service Elevation of Privilege Vulnerability Windows Update Service Elevation of Privilege Vulnerability
nvd
CVE-2021-24107MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-03-11
CVE-2021-24107 [MEDIUM] CVE-2021-24107: Windows Event Tracing Information Disclosure Vulnerability Windows Event Tracing Information Disclosure Vulnerability
nvd
CVE-2021-26892MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-03-11
CVE-2021-26892 [MEDIUM] CVE-2021-26892: Windows Extensible Firmware Interface Security Feature Bypass Vulnerability Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
nvd
CVE-2021-26869MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-03-11
CVE-2021-26869 [MEDIUM] CVE-2021-26869: Windows ActiveX Installer Service Information Disclosure Vulnerability Windows ActiveX Installer Service Information Disclosure Vulnerability
nvd
CVE-2021-26886MEDIUMCVSS 6.1≥ 10.0.0, < publication2021-03-11
CVE-2021-26886 [MEDIUM] CVE-2021-26886: User Profile Service Denial of Service Vulnerability User Profile Service Denial of Service Vulnerability
nvd
CVE-2021-26884MEDIUMCVSS 5.5≥ 10.0.0, < publication2021-03-11
CVE-2021-26884 [MEDIUM] CVE-2021-26884: Windows Media Photo Codec Information Disclosure Vulnerability Windows Media Photo Codec Information Disclosure Vulnerability
nvd
CVE-2021-24078CRITICALCVSS 9.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24078 [CRITICAL] CVE-2021-24078: Windows DNS Server Remote Code Execution Vulnerability Windows DNS Server Remote Code Execution Vulnerability
nvd
CVE-2021-24077CRITICALCVSS 9.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24077 [CRITICAL] CVE-2021-24077: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2021-24094CRITICALCVSS 9.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24094 [CRITICAL] CVE-2021-24094: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2021-1722CRITICALCVSS 9.8≥ 10.0.0, < publication2021-02-25
CVE-2021-1722 [CRITICAL] CVE-2021-1722: Windows Fax Service Remote Code Execution Vulnerability Windows Fax Service Remote Code Execution Vulnerability
nvd
CVE-2021-24074CRITICALCVSS 9.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24074 [CRITICAL] CVE-2021-24074: Windows TCP/IP Remote Code Execution Vulnerability Windows TCP/IP Remote Code Execution Vulnerability
nvd
CVE-2021-24096HIGHCVSS 7.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24096 [HIGH] CWE-269 CVE-2021-24096: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd
CVE-2021-1732HIGHCVSS 7.8KEVPoC≥ 10.0.0, < publication2021-02-25
CVE-2021-1732 [HIGH] CWE-787 CVE-2021-1732: Windows Win32k Elevation of Privilege Vulnerability Windows Win32k Elevation of Privilege Vulnerability
nvd
CVE-2021-24093HIGHCVSS 8.8≥ 10.0.0, < publication2021-02-25
CVE-2021-24093 [HIGH] CVE-2021-24093: Windows Graphics Component Remote Code Execution Vulnerability Windows Graphics Component Remote Code Execution Vulnerability
nvd
CVE-2021-1734HIGHCVSS 7.5≥ 10.0.0, < publication2021-02-25
CVE-2021-1734 [HIGH] CVE-2021-1734: Windows Remote Procedure Call Information Disclosure Vulnerability Windows Remote Procedure Call Information Disclosure Vulnerability
nvd
CVE-2021-25195HIGHCVSS 7.8≥ 10.0.0, < publication2021-02-25
CVE-2021-25195 [HIGH] CVE-2021-25195: Windows PKU2U Elevation of Privilege Vulnerability Windows PKU2U Elevation of Privilege Vulnerability
nvd
CVE-2021-24086HIGHCVSS 7.5≥ 10.0.0, < publication2021-02-25
CVE-2021-24086 [HIGH] Windows TCP/IP Denial of Service Vulnerability Windows TCP/IP Denial of Service Vulnerability Windows TCP/IP Denial of Service Vulnerability
cvelistv5