Windows Server 2019 vulnerabilities

460 known vulnerabilities in Windows Server 2019 from Microsoft. 436 are rated high or critical, and 159 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 5.5 Medium severity

  Microsoft WordPad Information Disclosure Exploited

  CVE-2023-36563Oct 10, 2023MicrosoftEPSS 20.3%

  Microsoft WordPad Information Disclosure Vulnerability

• 7.5 High severity

  HTTP/2 Rapid Reset Attack Exploited

  CVE-2023-44487Oct 10, 2023IETFEPSS 100%

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

• 7.5 High severity

  curl: Allocation of Resources Without Limits or Throttling

  CVE-2023-38039Sep 15, 2023CurlEPSS 56.2%

  When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server

• 7.8 High severity

  Microsoft Streaming Service Proxy Privilege Escalation Exploited

  CVE-2023-36802Sep 12, 2023MicrosoftEPSS 27.9%

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

• 7.5 High severity

  Microsoft Windows Search Remote Code Execution Exploited

  CVE-2023-36884Jul 11, 2023MicrosoftEPSS 99.4%

  Windows Search Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Windows Error Reporting Service Privilege Escalation Exploited

  CVE-2023-36874Jul 11, 2023MicrosoftEPSS 44.4%

  Windows Error Reporting Service Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows Defender SmartScreen Security Feature Bypass Exploited

  CVE-2023-32049Jul 11, 2023MicrosoftEPSS 4.16%

  Windows SmartScreen Security Feature Bypass Vulnerability

• 7.8 High severity

  Microsoft Windows MSHTML Platform Privilege Escalation Exploited

  CVE-2023-32046Jul 11, 2023MicrosoftEPSS 9.97%

  Windows MSHTML Platform Elevation of Privilege Vulnerability

• 8.4 High severity

  Microsoft Streaming Service Untrusted Pointer Dereference Exploited

  CVE-2023-29360Jun 14, 2023MicrosoftEPSS 21.6%

  Microsoft Streaming Service Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited

  CVE-2023-28252Apr 11, 2023MicrosoftEPSS 48.9%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 7.0 High severity

  Microsoft Windows CNG Key Isolation Service Privilege Escalation Exploited

  CVE-2023-28229Apr 11, 2023MicrosoftEPSS 1.67%

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

• 4.4 Medium severity

  Microsoft Windows SmartScreen Security Feature Bypass Exploited

  CVE-2023-24880Mar 14, 2023MicrosoftEPSS 78.2%

  Windows SmartScreen Security Feature Bypass Vulnerability

• 7.8 High severity

  TPM2.0: Out-of-bounds Write

  CVE-2023-1017Feb 28, 2023Trusted Computing GroupEPSS 1.38%

  An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of s

• 7.8 High severity

  Microsoft Windows Graphic Component Privilege Escalation Exploited

  CVE-2023-21823Feb 14, 2023MicrosoftEPSS 5.56%

  Windows Graphics Component Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited

  CVE-2023-23376Feb 14, 2023MicrosoftEPSS 10.8%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Exploited

  CVE-2023-21674Jan 10, 2023MicrosoftEPSS 34.2%

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

• 5.4 Medium severity

  Microsoft Defender SmartScreen Security Feature Bypass Exploited

  CVE-2022-44698Dec 13, 2022MicrosoftEPSS 75%

  Windows SmartScreen Security Feature Bypass Vulnerability

• 8.8 High severity

  Microsoft Windows Scripting Languages Remote Code Execution Exploited

  CVE-2022-41128Nov 9, 2022MicrosoftEPSS 24.6%

  Windows Scripting Languages Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Windows CNG Key Isolation Service Privilege Escalation Exploited

  CVE-2022-41125Nov 9, 2022MicrosoftEPSS 3.05%

  Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

• 5.4 Medium severity

  Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited

  CVE-2022-41091Nov 9, 2022MicrosoftEPSS 2.25%

  Windows Mark of the Web Security Feature Bypass Vulnerability

• 7.8 High severity

  Microsoft Windows Print Spooler Privilege Escalation Exploited

  CVE-2022-41073Nov 9, 2022MicrosoftEPSS 2.63%

  Windows Print Spooler Elevation of Privilege Vulnerability

• 5.4 Medium severity

  Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Exploited

  CVE-2022-41049Nov 9, 2022MicrosoftEPSS 3.27%

  Windows Mark of the Web Security Feature Bypass Vulnerability

• 7.8 High severity

  Microsoft Windows COM+ Event System Service Privilege Escalation Exploited

  CVE-2022-41033Oct 11, 2022MicrosoftEPSS 1.89%

  Windows COM+ Event System Service Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Print Spooler Privilege Escalation Exploited

  CVE-2022-38028Oct 11, 2022MicrosoftEPSS 14.9%

  Windows Print Spooler Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Exploited

  CVE-2022-37969Sep 13, 2022MicrosoftEPSS 28.5%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Exploited

  CVE-2022-34713Aug 9, 2022MicrosoftEPSS 67.8%

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

• 7.2 High severity

  Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Exploited

  CVE-2022-22047Jul 12, 2022MicrosoftEPSS 18.3%

  Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

• 7.5 High severity

  Windows 10 Version 20H2: NULL Pointer Dereference

  CVE-2022-32230Jun 14, 2022MicrosoftEPSS 7.93%

  Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD)

• 7.8 High severity

  Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Exploited

  CVE-2022-30190Jun 1, 2022MicrosoftEPSS 98.5%

  A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The

• 5.9 Medium severity

  Microsoft Windows LSA Spoofing Exploited

  CVE-2022-26925May 10, 2022MicrosoftEPSS 10.5%

  Windows LSA Spoofing Vulnerability

• 9.0 High severity

  Microsoft Active Directory Domain Services Privilege Escalation Exploited

  CVE-2022-26923May 10, 2022MicrosoftEPSS 83.5%

  Active Directory Domain Services Elevation of Privilege Vulnerability

• 4.4 Medium severity

  Microsoft Windows User Profile Service Privilege Escalation Exploited

  CVE-2022-26904Apr 15, 2022MicrosoftEPSS 16.9%

  Windows User Profile Service Elevation of Privilege Vulnerability

• 4.6 Medium severity

  Microsoft Windows CLFS Driver Privilege Escalation Exploited

  CVE-2022-24521Apr 15, 2022MicrosoftEPSS 7.13%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 7.2 High severity

  Microsoft Windows Print Spooler Privilege Escalation Exploited

  CVE-2022-22718Feb 9, 2022MicrosoftEPSS 18.5%

  Windows Print Spooler Elevation of Privilege Vulnerability

• 4.6 Medium severity

  Microsoft Windows Print Spooler Privilege Escalation Exploited

  CVE-2022-21999Feb 9, 2022MicrosoftEPSS 41%

  Windows Print Spooler Elevation of Privilege Vulnerability

• 9.3 High severity

  Microsoft Windows Runtime Remote Code Execution Exploited

  CVE-2022-21971Feb 9, 2022MicrosoftEPSS 53.9%

  Windows Runtime Remote Code Execution Vulnerability

• 6.9 Medium severity

  Microsoft Windows User Profile Service Privilege Escalation Exploited

  CVE-2022-21919Jan 11, 2022MicrosoftEPSS 2.57%

  Windows User Profile Service Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2022-21882Jan 11, 2022MicrosoftEPSS 59.2%

  Win32k Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Privilege Escalation Exploited

  CVE-2021-43226Dec 15, 2021MicrosoftEPSS 3.28%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

• 8.8 High severity

  Microsoft Active Directory Domain Services Privilege Escalation Exploited

  CVE-2021-42287Nov 10, 2021MicrosoftEPSS 77.2%

  Active Directory Domain Services Elevation of Privilege Vulnerability