Advisories · Technology

Microsoft Windows Server 2012 R2.

Every CVE that names Microsoft Windows Server 2012 R2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-38250 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Office for Android
- Microsoft Office for Universal
- CWE-126
Not analysed yet 10 Sept 2024
CVE-2024-38249 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38240 CVE record

CVSS 8.1 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38236 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 10 Sept 2024
CVE-2024-38230 CVE record

CVSS 6.5 Medium

Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-37968 CVE record

CVSS 7.5 High

Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-345
Not analysed yet 13 Aug 2024
CVE-2024-38223 CVE record

CVSS 6.8 Medium

Windows Initial Machine Configuration Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2024-38214 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38120 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38154 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38146 CVE record

CVSS 7.5 High

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38145 CVE record

CVSS 7.5 High

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38141 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38138 CVE record

CVSS 7.5 High

Windows Deployment Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38132 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38128 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38127 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 13 Aug 2024
CVE-2024-38126 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38121 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-29995 CVE record

CVSS 8.1 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-208
Not analysed yet 13 Aug 2024
CVE-2024-38107 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38213 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 13 Aug 2024
CVE-2024-38178 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV

Scripting Engine Memory Corruption Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38105 CVE record

CVSS 6.5 Medium

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Jul 2024
CVE-2024-38101 CVE record

CVSS 6.5 Medium

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38099 CVE record

CVSS 5.9 Medium

Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Authentication bypass
Not analysed yet 9 Jul 2024
CVE-2024-38074 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38073 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38070 CVE record

CVSS 7.8 High

Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Jul 2024
CVE-2024-38067 CVE record

CVSS 7.5 High

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-38066 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38065 CVE record

CVSS 6.8 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38058 CVE record

CVSS 6.8 Medium

BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Jul 2024
CVE-2024-38053 CVE record

CVSS 8.8 High

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38050 CVE record

CVSS 7.8 High

Windows Workstation Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38044 CVE record

CVSS 7.2 High

DHCP Server Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-197
Not analysed yet 9 Jul 2024
CVE-2024-38033 CVE record

CVSS 7.3 High

PowerShell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Jul 2024
CVE-2024-38031 CVE record

CVSS 7.5 High

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-38030 CVE record

CVSS 6.5 Medium

Windows Themes Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 9 Jul 2024
CVE-2024-38011 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-130
Not analysed yet 9 Jul 2024
CVE-2024-38010 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-130
Not analysed yet 9 Jul 2024
CVE-2024-37989 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-130
Not analysed yet 9 Jul 2024
CVE-2024-37988 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-130
Not analysed yet 9 Jul 2024
CVE-2024-37984 CVE record

CVSS 8.4 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37975 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37973 CVE record

CVSS 8.8 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-37972 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-37971 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-30079 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Jul 2024
CVE-2024-30071 CVE record

CVSS 4.7 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Jul 2024
CVE-2024-38112 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows MSHTML Platform Spoofing Vulnerability
- Microsoft Windows 10 Version 22H2
- Microsoft Windows 11 Version 23H2
- CWE-451
Not analysed yet 9 Jul 2024
CVE-2024-38102 CVE record

CVSS 6.5 Medium

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38077 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38071 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-126
Not analysed yet 9 Jul 2024
CVE-2024-38061 CVE record

CVSS 7.5 High

DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 9 Jul 2024
CVE-2024-38060 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows Imaging Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38056 CVE record

CVSS 5.5 Medium

Microsoft Windows Codecs Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38034 CVE record

CVSS 7.8 High

Windows Filtering Platform Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38022 CVE record

CVSS 7.0 High

Windows Image Acquisition Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 9 Jul 2024
CVE-2024-38015 CVE record

CVSS 7.5 High

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Denial of service
Not analysed yet 9 Jul 2024