Advisories · Technology

Microsoft Windows Server 2012 R2 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 R2 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-36017 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows Scripting Engine Memory Corruption Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36036 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36436 CVE record

CVSS 7.8 High

Windows MSHTML Platform Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-36743 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36776 CVE record

CVSS 7.0 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-38166 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-29348 CVE record

CVSS 7.5 High

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Information disclosure
Not analysed yet 10 Oct 2023
CVE-2023-36431 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 10 Oct 2023
CVE-2023-36434 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows IIS Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 22H2
- Microsoft Windows 11 version 22H2
- Authentication bypass
Not analysed yet 10 Oct 2023
CVE-2023-36438 CVE record

CVSS 7.5 High

Windows TCP/IP Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-36563 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Microsoft WordPad Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Oct 2023
CVE-2023-36564 CVE record

CVSS 6.5 Medium

Windows Search Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-36567 CVE record

CVSS 7.5 High

Windows Deployment Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36570 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36571 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36572 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36573 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36574 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36575 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36577 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36578 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36579 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 10 Oct 2023
CVE-2023-36581 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 10 Oct 2023
CVE-2023-36582 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36583 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36584 CVE record

CVSS 5.4 MediumCritical · KEVKEV

Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-36585 CVE record

CVSS 7.5 High

Windows upnphost.dll Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Oct 2023
CVE-2023-36589 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36590 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-36591 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36592 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36593 CVE record

CVSS 7.8 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36594 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36596 CVE record

CVSS 7.5 High

Remote Procedure Call Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36598 CVE record

CVSS 7.8 High

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36602 CVE record

CVSS 7.5 High

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36606 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 10 Oct 2023
CVE-2023-36697 CVE record

CVSS 6.8 Medium

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Oct 2023
CVE-2023-36701 CVE record

CVSS 7.8 High

Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36702 CVE record

CVSS 7.8 High

Microsoft DirectMusic Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Code injection
Not analysed yet 10 Oct 2023
CVE-2023-36703 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Denial of service
Not analysed yet 10 Oct 2023
CVE-2023-36706 CVE record

CVSS 6.5 Medium

Windows Deployment Services Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-20
Not analysed yet 10 Oct 2023
CVE-2023-36707 CVE record

CVSS 6.5 Medium

Windows Deployment Services Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-20
Not analysed yet 10 Oct 2023
CVE-2023-36710 CVE record

CVSS 7.8 High

Windows Media Foundation Core Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 10 Oct 2023
CVE-2023-36711 CVE record

CVSS 7.8 High

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 10 Oct 2023
CVE-2023-36712 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-36713 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36722 CVE record

CVSS 4.4 Medium

Active Directory Domain Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 Oct 2023
CVE-2023-36724 CVE record

CVSS 5.5 Medium

Windows Power Management Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Authentication bypass
Not analysed yet 10 Oct 2023
CVE-2023-36726 CVE record

CVSS 7.8 High

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36729 CVE record

CVSS 7.8 High

Named Pipe File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-36731 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Oct 2023
CVE-2023-36732 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 Oct 2023
CVE-2023-41774 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41773 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41771 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41770 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41769 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41768 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023
CVE-2023-41767 CVE record

CVSS 8.1 High

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Oct 2023