Advisories · Technology

Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-29371 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 13 Jun 2023
CVE-2023-29369 CVE record

CVSS 6.5 Medium

Remote Procedure Call Runtime Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-29368 CVE record

CVSS 7.0 High

Windows Filtering Platform Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-29367 CVE record

CVSS 7.8 High

iSCSI Target WMI Provider Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-29365 CVE record

CVSS 7.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-29364 CVE record

CVSS 7.0 High

Windows Authentication Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-29363 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-29362 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-29359 CVE record

CVSS 7.8 High

GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 13 Jun 2023
CVE-2023-29358 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Jun 2023
CVE-2023-29355 CVE record

CVSS 5.3 Medium

DHCP Server Service Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Information disclosure
Not analysed yet 13 Jun 2023
CVE-2023-29351 CVE record

CVSS 8.1 High

Windows Group Policy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 13 Jun 2023
CVE-2023-29346 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
Not analysed yet 13 Jun 2023
CVE-2022-35755 CVE record

CVSS 7.3 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 31 May 2023
CVE-2022-35754 CVE record

CVSS 6.7 Medium

Unified Write Filter Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H1
Not analysed yet 31 May 2023
CVE-2022-35749 CVE record

CVSS 7.8 High

Windows Digital Media Receiver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 31 May 2023
CVE-2022-35748 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

HTTP.sys Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 31 May 2023
CVE-2022-35746 CVE record

CVSS 7.8 High

Windows Digital Media Receiver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 31 May 2023
CVE-2023-29336 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 May 2023
CVE-2023-24948 CVE record

CVSS 7.4 High

Windows Bluetooth Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 May 2023
CVE-2023-24941 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Network File System Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 May 2023
CVE-2023-24901 CVE record

CVSS 7.5 High

Windows NFS Portmapper Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 May 2023
CVE-2023-24939 CVE record

CVSS 7.5 High

Server for NFS Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 May 2023
CVE-2023-21712 CVE record

CVSS 8.1 High

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 27 Apr 2023
CVE-2023-28308 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28307 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28306 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28256 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28278 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28255 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28254 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28249 CVE record

CVSS 6.2 Medium

Windows Boot Manager Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 11 Apr 2023
CVE-2023-28247 CVE record

CVSS 7.5 High

Windows Network File System Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28269 CVE record

CVSS 6.2 Medium

Windows Boot Manager Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28268 CVE record

CVSS 8.1 High

Netlogon RPC Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 11 Apr 2023
CVE-2023-28244 CVE record

CVSS 8.1 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Weak cryptography or TLS
Not analysed yet 11 Apr 2023
CVE-2023-28267 CVE record

CVSS 6.5 Medium

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 11 Apr 2023
CVE-2023-28243 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28240 CVE record

CVSS 8.8 High

Windows Network Load Balancing Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28238 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28237 CVE record

CVSS 7.8 High

Windows Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28236 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28231 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

DHCP Server Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28224 CVE record

CVSS 7.1 High

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 11 Apr 2023
CVE-2023-28223 CVE record

CVSS 6.6 Medium

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24929 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24887 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24928 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24886 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24927 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24885 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24926 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24884 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
Not analysed yet 11 Apr 2023
CVE-2023-24925 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24883 CVE record

CVSS 6.5 Medium

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 11 Apr 2023
CVE-2023-24924 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28305 CVE record

CVSS 6.6 Medium

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-28297 CVE record

CVSS 8.8 High

Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24931 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 11 Apr 2023
CVE-2023-24876 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Mar 2023