Windows Server 2004 vulnerabilities

27 known vulnerabilities in Windows Server 2004 from Microsoft. 25 are rated high or critical, and 27 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Windows Privilege Escalation Exploited

  CVE-2021-43226Dec 15, 2021MicrosoftEPSS 3.28%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Active Directory Domain Services Privilege Escalation Exploited

  CVE-2021-42287Nov 10, 2021MicrosoftEPSS 77.2%

  Active Directory Domain Services Elevation of Privilege Vulnerability

• 7.5 High severity

  Microsoft Active Directory Domain Services Privilege Escalation Exploited

  CVE-2021-42278Nov 10, 2021MicrosoftEPSS 73.3%

  Active Directory Domain Services Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Installer Privilege Escalation Exploited

  CVE-2021-41379Nov 10, 2021MicrosoftEPSS 19.5%

  Windows Installer Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2021-41357Oct 13, 2021MicrosoftEPSS 1.52%

  Win32k Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2021-40450Oct 13, 2021MicrosoftEPSS 1.52%

  Win32k Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Win32k Privilege Escalation Exploited

  CVE-2021-40449Oct 13, 2021MicrosoftEPSS 81.9%

  Win32k Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft MSHTML Remote Code Execution Exploited

  CVE-2021-40444Sep 15, 2021MicrosoftEPSS 97.8%

  Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An at

• 7.8 High severity

  Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited

  CVE-2021-36955Sep 15, 2021MicrosoftEPSS 4.07%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Update Medic Service Privilege Escalation Exploited

  CVE-2021-36948Aug 12, 2021MicrosoftEPSS 23.3%

  Windows Update Medic Service Elevation of Privilege Vulnerability

• 7.5 High severity

  Microsoft Windows Local Security Authority (LSA) Spoofing Exploited

  CVE-2021-36942Aug 12, 2021MicrosoftEPSS 66%

  Windows LSA Spoofing Vulnerability

• 7.8 High severity

  Microsoft Windows Event Tracing Privilege Escalation Exploited

  CVE-2021-34486Aug 12, 2021MicrosoftEPSS 9.33%

  Windows Event Tracing Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows User Profile Service Privilege Escalation Exploited

  CVE-2021-34484Aug 12, 2021MicrosoftEPSS 21.8%

  Windows User Profile Service Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2021-33771Jul 14, 2021MicrosoftEPSS 10.2%

  Windows Kernel Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2021-31979Jul 14, 2021MicrosoftEPSS 4.54%

  Windows Kernel Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Exploited

  CVE-2021-33739Jun 8, 2021MicrosoftEPSS 6.61%

  Microsoft DWM Core Library Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows NTFS Privilege Escalation Exploited

  CVE-2021-31956Jun 8, 2021MicrosoftEPSS 22.3%

  Windows NTFS Elevation of Privilege Vulnerability

• 5.5 Medium severity

  Microsoft Windows Kernel Information Disclosure Exploited

  CVE-2021-31955Jun 8, 2021MicrosoftEPSS 81.1%

  Windows Kernel Information Disclosure Vulnerability

• 7.8 High severity

  Microsoft Enhanced Cryptographic Provider Privilege Escalation Exploited

  CVE-2021-31201Jun 8, 2021MicrosoftEPSS 2.62%

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Enhanced Cryptographic Provider Privilege Escalation Exploited

  CVE-2021-31199Jun 8, 2021MicrosoftEPSS 2.98%

  Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Print Spooler Remote Code Execution Exploited

  CVE-2021-1675Jun 8, 2021MicrosoftEPSS 85.3%

  Windows Print Spooler Remote Code Execution Vulnerability

• 9.8 Critical severity

  Microsoft HTTP Protocol Stack Remote Code Execution Exploited

  CVE-2021-31166May 11, 2021MicrosoftEPSS 99.9%

  HTTP Protocol Stack Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2021-28310Apr 13, 2021MicrosoftEPSS 8.4%

  Win32k Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2021-1732Feb 25, 2021MicrosoftEPSS 78.4%

  Windows Win32k Elevation of Privilege Vulnerability

• 10.0 Critical severity

  Microsoft Netlogon Privilege Escalation Exploited

  CVE-2020-1472Aug 17, 2020MicrosoftEPSS 99.4%

  An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run

• 5.5 Medium severity

  Microsoft Windows Spoofing Exploited

  CVE-2020-1464Aug 17, 2020MicrosoftEPSS 38.9%

  A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass secur

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2020-0986Jun 9, 2020MicrosoftEPSS 16.4%

  An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264,