Advisories · Technology

Microsoft Windows Server 2012 R2.

Every CVE that names Microsoft Windows Server 2012 R2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-21798 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21797 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21684 CVE record

CVSS 8.8 High

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Feb 2023
CVE-2023-21767 CVE record

CVSS 7.8 High

Windows Overlay Filter Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Jan 2023
CVE-2023-21683 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21677 CVE record

CVSS 7.5 High

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21674 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 10 Jan 2023
CVE-2023-21558 CVE record

CVSS 7.8 High

Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 10 Jan 2023
CVE-2023-21549 CVE record

CVSS 8.8 High

Windows SMB Witness Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 Jan 2023
CVE-2023-21542 CVE record

CVSS 7.0 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 10 Jan 2023
CVE-2023-21535 CVE record

CVSS 8.1 High

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 10 Jan 2023
CVE-2023-21524 CVE record

CVSS 7.8 High

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Hard-coded credentials
Not analysed yet 10 Jan 2023
CVE-2022-44707 CVE record

CVSS 6.5 Medium

Windows Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-44683 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-44682 CVE record

CVSS 6.8 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-44680 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-44679 CVE record

CVSS 6.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Dec 2022
CVE-2022-41128 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Scripting Languages Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Nov 2022
CVE-2022-41125 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Nov 2022
CVE-2022-41118 CVE record

CVSS 7.5 High

Windows Scripting Languages Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41109 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41100 CVE record

CVSS 7.8 High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41098 CVE record

CVSS 5.5 Medium

Windows GDI+ Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41097 CVE record

CVSS 6.5 Medium

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41095 CVE record

CVSS 7.8 High

Windows Digital Media Receiver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41093 CVE record

CVSS 7.8 High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41090 CVE record

CVSS 5.9 Medium

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41088 CVE record

CVSS 8.1 High

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41086 CVE record

CVSS 6.4 Medium

Windows Group Policy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41073 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 9 Nov 2022
CVE-2022-41058 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41057 CVE record

CVSS 7.8 High

Windows HTTP.sys Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41056 CVE record

CVSS 7.5 High

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41053 CVE record

CVSS 7.5 High

Windows Kerberos Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41048 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41047 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41045 CVE record

CVSS 7.8 High

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-41039 CVE record

CVSS 8.1 High

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 9 Nov 2022
CVE-2022-38023 CVE record

CVSS 8.1 High

Netlogon RPC Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
Not analysed yet 9 Nov 2022
CVE-2022-37992 CVE record

CVSS 7.8 High

Windows Group Policy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 9 Nov 2022
CVE-2022-37967 CVE record

CVSS 7.2 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
Not analysed yet 9 Nov 2022
CVE-2022-37966 CVE record

CVSS 8.1 High

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
Not analysed yet 9 Nov 2022
CVE-2022-38045 CVE record

CVSS 8.8 High

Windows Server Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38044 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows CD-ROM File System Driver Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 10 Version 20H2
Not analysed yet 11 Oct 2022
CVE-2022-38028 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-38027 CVE record

CVSS 7.0 High

Windows Storage Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 21H2
Not analysed yet 11 Oct 2022
CVE-2022-37996 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 10 Version 21H2
Not analysed yet 11 Oct 2022
CVE-2022-37984 CVE record

CVSS 7.8 High

Windows WLAN Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-37976 CVE record

CVSS 8.8 High

Active Directory Certificate Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 11 Oct 2022
CVE-2022-37965 CVE record

CVSS 5.9 Medium

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Oct 2022
CVE-2022-37959 CVE record

CVSS 6.5 Medium

Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 13 Sept 2022
CVE-2022-37958 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35833 CVE record

CVSS 7.5 High

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35832 CVE record

CVSS 5.5 Medium

Windows Event Tracing Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35831 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-35830 CVE record

CVSS 8.1 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 13 Sept 2022
CVE-2022-35803 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 21H1
Not analysed yet 13 Sept 2022
CVE-2022-34725 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Sept 2022
CVE-2022-34724 CVE record

CVSS 7.5 High

Windows DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 13 Sept 2022
CVE-2022-33679 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 13 Sept 2022