Advisories · Technology

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation).

Every CVE that names Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-41771 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41770 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41769 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41768 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41767 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41766 CVE record

CVSS 7.8 High

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-426
Not analysed yet 10 Oct 2023
CVE-2023-41765 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-35349 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Oct 2023
CVE-2023-38160 CVE record

CVSS 5.5 Medium

Windows TCP/IP Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-36801 CVE record

CVSS 5.3 Medium

DHCP Server Service Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-126
Not analysed yet 12 Sept 2023
CVE-2023-36804 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-36805 CVE record

CVSS 7.0 High

Windows MSHTML Platform Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Command injection
Not analysed yet 12 Sept 2023
CVE-2023-38139 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38141 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Sept 2023
CVE-2023-38142 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38143 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38144 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 12 Sept 2023
CVE-2023-38149 CVE record

CVSS 7.5 High

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 12 Sept 2023
CVE-2023-38152 CVE record

CVSS 5.3 Medium

DHCP Server Service Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-126
Not analysed yet 12 Sept 2023
CVE-2023-38161 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2023-38172 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 8 Aug 2023
CVE-2023-38184 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35385 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35383 CVE record

CVSS 7.5 High

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35381 CVE record

CVSS 8.8 High

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35380 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-35379 CVE record

CVSS 7.8 High

Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-35377 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-38254 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-35376 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-36913 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36912 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 8 Aug 2023
CVE-2023-36911 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36910 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36909 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36908 CVE record

CVSS 6.5 Medium

Windows Hyper-V Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 8 Aug 2023
CVE-2023-36907 CVE record

CVSS 5.5 Medium

Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-170
Not analysed yet 8 Aug 2023
CVE-2023-36906 CVE record

CVSS 5.5 Medium

Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-170
Not analysed yet 8 Aug 2023
CVE-2023-36903 CVE record

CVSS 7.8 High

Windows System Assessment Tool Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-36900 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36889 CVE record

CVSS 5.5 Medium

Windows Group Policy Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 8 Aug 2023
CVE-2023-36882 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Aug 2023
CVE-2023-36876 CVE record

CVSS 7.1 High

Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-35359 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Aug 2023
CVE-2023-36884 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Search Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 11 Jul 2023
CVE-2023-35312 CVE record

CVSS 7.8 High

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-35310 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35309 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-35303 CVE record

CVSS 8.8 High

USB Audio Class System Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 11 Jul 2023
CVE-2023-35300 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-35299 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-35297 CVE record

CVSS 8.1 High

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-32057 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 11 Jul 2023
CVE-2023-32055 CVE record

CVSS 6.7 Medium

Active Template Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-32054 CVE record

CVSS 7.3 High

Volume Shadow Copy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 11 Jul 2023
CVE-2023-32053 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 11 Jul 2023
CVE-2023-33164 CVE record

CVSS 6.5 Medium

Remote Procedure Call Runtime Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Jul 2023
CVE-2023-33163 CVE record

CVSS 7.5 High

Windows Network Load Balancing Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Jul 2023
CVE-2023-33154 CVE record

CVSS 7.8 High

Windows Partition Management Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 11 Jul 2023
CVE-2023-21526 CVE record

CVSS 7.4 High

Windows Netlogon Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jul 2023