Advisories · Technology

Microsoft Windows Server 2012 R2.

Every CVE that names Microsoft Windows Server 2012 R2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-28898 CVE record

CVSS 6.3 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28896 CVE record

CVSS 7.5 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28923 CVE record

CVSS 6.4 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28919 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-28921 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-28922 CVE record

CVSS 4.1 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 9 Apr 2024
CVE-2024-26250 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-20689 CVE record

CVSS 7.1 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-20688 CVE record

CVSS 7.1 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-20669 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-26169 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 12 Mar 2024
CVE-2024-21433 CVE record

CVSS 7.0 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Mar 2024
CVE-2024-21432 CVE record

CVSS 7.0 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 12 Mar 2024
CVE-2024-21427 CVE record

CVSS 7.5 High

Windows Kerberos Security Feature Bypass Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Mar 2024
CVE-2024-21407 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26197 CVE record

CVSS 6.5 Medium

Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-21430 CVE record

CVSS 5.7 Medium

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21406 CVE record

CVSS 7.5 High

Windows Printing Service Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Weak cryptography or TLS
Not analysed yet 13 Feb 2024
CVE-2024-21405 CVE record

CVSS 7.0 High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 13 Feb 2024
CVE-2024-21391 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 13 Feb 2024
CVE-2024-21377 CVE record

CVSS 5.5 Medium

Windows DNS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 13 Feb 2024
CVE-2024-21370 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21368 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21367 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21365 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21363 CVE record

CVSS 7.8 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21359 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21356 CVE record

CVSS 6.5 Medium

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21355 CVE record

CVSS 7.0 High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 13 Feb 2024
CVE-2024-21348 CVE record

CVSS 7.5 High

Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21347 CVE record

CVSS 7.5 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21344 CVE record

CVSS 5.9 Medium

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21343 CVE record

CVSS 5.9 Medium

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21420 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21375 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21372 CVE record

CVSS 8.8 High

Windows OLE Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21371 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 13 Feb 2024
CVE-2024-21369 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21366 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21361 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21360 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21358 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21357 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21354 CVE record

CVSS 7.8 High

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21352 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 13 Feb 2024
CVE-2024-21350 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21349 CVE record

CVSS 8.8 High

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21340 CVE record

CVSS 4.6 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-126
Not analysed yet 13 Feb 2024
CVE-2024-21320 CVE record

CVSS 6.5 Medium

Windows Themes Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 9 Jan 2024
CVE-2024-20662 CVE record

CVSS 4.9 Medium

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20655 CVE record

CVSS 6.6 Medium

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20652 CVE record

CVSS 8.1 High

Windows HTML Platforms Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 9 Jan 2024
CVE-2024-21307 CVE record

CVSS 7.5 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20691 CVE record

CVSS 4.7 Medium

Windows Themes Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20682 CVE record

CVSS 7.8 High

Windows Cryptographic Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20658 CVE record

CVSS 7.8 High

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2023-35622 CVE record

CVSS 7.5 High

Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Dec 2023
CVE-2023-35633 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows Server 2008 Service Pack 2
- Path traversal
Not analysed yet 12 Dec 2023
CVE-2023-35632 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-35629 CVE record

CVSS 6.8 Medium

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows Server 2008 Service Pack 2
- Memory corruption
Not analysed yet 12 Dec 2023