Advisories · Technology

Microsoft Windows Server 2012 R2.

Every CVE that names Microsoft Windows Server 2012 R2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-34446 CVE record

CVSS 8.0 High

Windows HTML Platforms Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 16 Jul 2021
CVE-2021-34444 CVE record

CVSS 6.5 Medium

Windows DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 16 Jul 2021
CVE-2021-34442 CVE record

CVSS 8.8 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 16 Jul 2021
CVE-2021-34441 CVE record

CVSS 7.8 High

Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 16 Jul 2021
CVE-2021-34440 CVE record

CVSS 5.5 Medium

GDI+ Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 16 Jul 2021
CVE-2021-34525 CVE record

CVSS 8.8 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-34516 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34514 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34511 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34507 CVE record

CVSS 6.5 Medium

Windows Remote Assistance Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34504 CVE record

CVSS 7.8 High

Windows Address Book Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34500 CVE record

CVSS 6.3 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34499 CVE record

CVSS 6.5 Medium

Windows DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-34498 CVE record

CVSS 7.8 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34497 CVE record

CVSS 6.8 Medium

Windows MSHTML Platform Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34496 CVE record

CVSS 5.5 Medium

Windows GDI Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34494 CVE record

CVSS 8.8 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-34492 CVE record

CVSS 8.1 High

Windows Certificate Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34491 CVE record

CVSS 5.5 Medium

Win32k Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34476 CVE record

CVSS 7.5 High

Bowser.sys Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33788 CVE record

CVSS 7.5 High

Windows LSA Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33786 CVE record

CVSS 8.1 High

Windows LSA Security Feature Bypass Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33783 CVE record

CVSS 6.5 Medium

Windows SMB Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33782 CVE record

CVSS 5.5 Medium

Windows Authenticode Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33780 CVE record

CVSS 8.8 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33773 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33771 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33765 CVE record

CVSS 6.2 Medium

Windows Installer Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33764 CVE record

CVSS 5.9 Medium

Windows Key Distribution Center Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33763 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33761 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33757 CVE record

CVSS 5.3 Medium

Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33756 CVE record

CVSS 8.8 High

Windows DNS Snap-in Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1809
Not analysed yet 14 Jul 2021
CVE-2021-33754 CVE record

CVSS 8.0 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33752 CVE record

CVSS 8.8 High

Windows DNS Snap-in Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1809
Not analysed yet 14 Jul 2021
CVE-2021-33750 CVE record

CVSS 8.8 High

Windows DNS Snap-in Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1809
Not analysed yet 14 Jul 2021
CVE-2021-33749 CVE record

CVSS 8.8 High

Windows DNS Snap-in Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1809
Not analysed yet 14 Jul 2021
CVE-2021-33746 CVE record

CVSS 8.0 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33745 CVE record

CVSS 6.5 Medium

Windows DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-31979 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jul 2021
CVE-2021-31183 CVE record

CVSS 7.5 High

Windows TCP/IP Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34527 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Print Spooler Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 2 Jul 2021
CVE-2021-33742 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows MSHTML Platform Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 8 Jun 2021
CVE-2021-31976 CVE record

CVSS 7.5 High

Server for NFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31975 CVE record

CVSS 7.5 High

Server for NFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31974 CVE record

CVSS 7.5 High

Server for NFS Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31972 CVE record

CVSS 5.5 Medium

Event Tracing for Windows Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31971 CVE record

CVSS 6.8 Medium

Windows HTML Platforms Security Feature Bypass Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012
Not analysed yet 8 Jun 2021
CVE-2021-31970 CVE record

CVSS 5.5 Medium

Windows TCP/IP Driver Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 8 Jun 2021
CVE-2021-31959 CVE record

CVSS 6.4 Medium

Scripting Engine Memory Corruption Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows 10 Version 20H2
Not analysed yet 8 Jun 2021
CVE-2021-31953 CVE record

CVSS 7.8 High

Windows Filter Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31182 CVE record

CVSS 7.1 High

Microsoft Bluetooth Driver Spoofing Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 May 2021
CVE-2021-28479 CVE record

CVSS 5.5 Medium

Windows CSC Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 May 2021
CVE-2021-28447 CVE record

CVSS 4.4 Medium

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28444 CVE record

CVSS 5.7 Medium

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28439 CVE record

CVSS 7.5 High

Windows TCP/IP Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28435 CVE record

CVSS 5.5 Medium

Windows Event Tracing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28325 CVE record

CVSS 6.5 Medium

Windows SMB Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27094 CVE record

CVSS 4.4 Medium

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27072 CVE record

CVSS 7.0 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021