Advisories · Technology

Microsoft Windows Server 2012 R2.

Every CVE that names Microsoft Windows Server 2012 R2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-24484 CVE record

CVSS 5.5 Medium

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 15 Apr 2022
CVE-2022-24483 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-22008 CVE record

CVSS 7.8 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24455 CVE record

CVSS 7.8 High

Windows CD-ROM Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23294 CVE record

CVSS 8.8 High

Windows Event Tracing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23284 CVE record

CVSS 7.2 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-22010 CVE record

CVSS 4.4 Medium

Media Foundation Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-21977 CVE record

CVSS 3.3 Low

Media Foundation Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-21975 CVE record

CVSS 4.7 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-21973 CVE record

CVSS 5.5 Medium

Windows Media Center Update Denial of Service Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
Not analysed yet 9 Mar 2022
CVE-2022-22002 CVE record

CVSS 5.5 Medium

Windows User Account Profile Picture Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22001 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21993 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21963 CVE record

CVSS 6.4 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21962 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21961 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21960 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21959 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21958 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21928 CVE record

CVSS 6.3 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21905 CVE record

CVSS 4.6 Medium

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21903 CVE record

CVSS 7.0 High

Windows GDI Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21901 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21900 CVE record

CVSS 4.6 Medium

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21899 CVE record

CVSS 5.5 Medium

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 7
Not analysed yet 11 Jan 2022
CVE-2022-21895 CVE record

CVSS 7.8 High

Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21894 CVE record

CVSS 4.4 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 11 Jan 2022
CVE-2022-21892 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21884 CVE record

CVSS 7.8 High

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 11 Jan 2022
CVE-2022-21881 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21875 CVE record

CVSS 7.0 High

Windows Storage Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21870 CVE record

CVSS 7.0 High

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21868 CVE record

CVSS 7.0 High

Windows Devices Human Interface Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21867 CVE record

CVSS 7.0 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21864 CVE record

CVSS 7.0 High

Windows UI Immersive Server API Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21859 CVE record

CVSS 7.0 High

Windows Accounts Control Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2021-43248 CVE record

CVSS 7.8 High

Windows Digital Media Receiver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-43245 CVE record

CVSS 7.8 High

Windows Digital TV Tuner Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
Not analysed yet 15 Dec 2021
CVE-2021-43232 CVE record

CVSS 7.8 High

Windows Event Tracing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Dec 2021
CVE-2021-40441 CVE record

CVSS 7.8 High

Windows Media Center Elevation of Privilege Vulnerability
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
Not analysed yet 15 Dec 2021
CVE-2021-42291 CVE record

CVSS 7.5 High

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 10 Nov 2021
CVE-2021-42287 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 10 Nov 2021
CVE-2021-42285 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42284 CVE record

CVSS 6.8 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42283 CVE record

CVSS 8.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-42282 CVE record

CVSS 7.5 High

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 10 Nov 2021
CVE-2021-42278 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 10 Nov 2021
CVE-2021-42275 CVE record

CVSS 8.8 High

Microsoft COM for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41379 CVE record

CVSS 5.5 MediumCritical · KEVKEV · ransomware

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 10 Nov 2021
CVE-2021-41377 CVE record

CVSS 7.8 High

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41371 CVE record

CVSS 4.4 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41370 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41367 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41366 CVE record

CVSS 7.8 High

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-38666 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
Not analysed yet 10 Nov 2021
CVE-2021-38665 CVE record

CVSS 7.4 High

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 10 Version 1507
Not analysed yet 10 Nov 2021
CVE-2021-38631 CVE record

CVSS 4.4 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 10 Nov 2021
CVE-2021-41345 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Oct 2021
CVE-2021-41342 CVE record

CVSS 6.8 Medium

Windows MSHTML Platform Remote Code Execution Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
Not analysed yet 13 Oct 2021
CVE-2021-40488 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021