Advisories · Technology

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation).

Every CVE that names Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-26901 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26899 CVE record

CVSS 7.8 High

Windows UPnP Device Host Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26898 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26897 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26896 CVE record

CVSS 7.5 High

Windows DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26895 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26894 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26893 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26887 CVE record

CVSS 7.8 High

Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26882 CVE record

CVSS 7.8 High

Remote Access API Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26881 CVE record

CVSS 7.5 High

Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26878 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26877 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26875 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26873 CVE record

CVSS 7.0 High

Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26872 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26869 CVE record

CVSS 5.5 Medium

Windows ActiveX Installer Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26862 CVE record

CVSS 7.0 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26861 CVE record

CVSS 7.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-24107 CVE record

CVSS 5.5 Medium

Windows Event Tracing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-1640 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Mar 2021
CVE-2021-25195 CVE record

CVSS 7.8 High

Windows PKU2U Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 25 Feb 2021
CVE-2021-24094 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-24086 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-24083 CVE record

CVSS 7.8 High

Windows Address Book Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-24078 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 25 Feb 2021
CVE-2021-24074 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-1704 CVE record

CVSS 7.3 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows Server version 20H2
- Microsoft Windows 10 Version 1803
Not analysed yet 12 Jan 2021
CVE-2021-1694 CVE record

CVSS 7.5 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 12 Jan 2021
CVE-2021-1674 CVE record

CVSS 8.8 High

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1668 CVE record

CVSS 7.8 High

Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1656 CVE record

CVSS 5.5 Medium

TPM Device Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1649 CVE record

CVSS 7.8 High

Active Template Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 12 Jan 2021
CVE-2020-17140 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows SMB Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Dec 2020
CVE-2020-17098 CVE record

CVSS 5.5 Medium

Windows GDI+ Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Dec 2020
CVE-2020-16964 CVE record

CVSS 7.8 High

Windows Backup Engine Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Dec 2020
CVE-2020-16963 CVE record

CVSS 7.8 High

Windows Backup Engine Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Dec 2020
CVE-2020-16962 CVE record

CVSS 7.8 High

Windows Backup Engine Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Dec 2020
CVE-2020-16961 CVE record

CVSS 7.8 High

Windows Backup Engine Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Dec 2020
CVE-2020-16960 CVE record

CVSS 7.8 High

Windows Backup Engine Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Dec 2020
CVE-2020-16959 CVE record

CVSS 7.8 High

Windows Backup Engine Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Dec 2020
CVE-2020-16958 CVE record

CVSS 7.8 High

Windows Backup Engine Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Dec 2020
CVE-2020-17051 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Network File System Remote Code Execution Vulnerability
- Microsoft Windows Server version 20H2
- Microsoft Windows Server 2019
Not analysed yet 11 Nov 2020
CVE-2020-17014 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1903 for 32-bit Systems
- Microsoft Windows 10 Version 1903 for x64-based Systems
Not analysed yet 11 Nov 2020
CVE-2020-17049 CVE record

CVSS 6.6 Medium

Kerberos KDC Security Feature Bypass Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 11 Nov 2020
CVE-2020-16863 CVE record

CVSS 7.5 High

Windows Remote Desktop Service Denial of Service Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
Not analysed yet 16 Oct 2020
CVE-2020-1228 CVE record

CVSS 7.5 High

Windows DNS Denial of Service Vulnerability
- Microsoft Windows Server version 2004
- Microsoft Windows Server 2019
Not analysed yet 11 Sept 2020
CVE-2020-0856 CVE record

CVSS 6.5 Medium

Active Directory Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 11 Sept 2020
CVE-2020-0836 CVE record

CVSS 7.5 High

Windows DNS Denial of Service Vulnerability
- Microsoft Windows Server version 2004
- Microsoft Windows Server 2019
Not analysed yet 11 Sept 2020
CVE-2020-0761 CVE record

CVSS 8.8 High

Active Directory Remote Code Execution Vulnerability
- Microsoft Windows Server version 2004
- Microsoft Windows Server 2019
Not analysed yet 11 Sept 2020
CVE-2020-0718 CVE record

CVSS 8.8 High

Active Directory Remote Code Execution Vulnerability
- Microsoft Windows Server version 2004
- Microsoft Windows Server 2019
Not analysed yet 11 Sept 2020
CVE-2020-0664 CVE record

CVSS 6.5 Medium

Active Directory Information Disclosure Vulnerability
- Microsoft Windows Server version 2004
- Microsoft Windows Server 2019
Not analysed yet 11 Sept 2020
CVE-2020-1534 CVE record

CVSS 7.8 High

Windows Backup Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 17 Aug 2020
CVE-2020-1472 CVE record

CVSS 5.5 MediumCritical · KEVKEV · ransomware

Netlogon Elevation of Privilege Vulnerability
- Microsoft Windows Server version 2004
- Microsoft Windows Server 2019
Not analysed yet 17 Aug 2020
CVE-2020-1467 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Windows Hard Link Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 17 Aug 2020
CVE-2020-1179 CVE record

Windows GDI Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 21 May 2020
CVE-2020-1176 CVE record

CVSS 7.8 High

Jet Database Engine Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 21 May 2020
CVE-2020-1175 CVE record

CVSS 7.8 High

Jet Database Engine Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 21 May 2020
CVE-2020-1174 CVE record

CVSS 7.8 High

Jet Database Engine Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 21 May 2020
CVE-2020-1154 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 21 May 2020