Advisories · Technology

Microsoft Windows Server 2012 (Server Core installation).

Every CVE that names Microsoft Windows Server 2012 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-43592 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43589 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43572 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Management Console Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-707
Not analysed yet 8 Oct 2024
CVE-2024-43570 CVE record

CVSS 6.4 Medium

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43567 CVE record

CVSS 7.5 High

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43564 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43563 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Oct 2024
CVE-2024-43560 CVE record

CVSS 7.8 High

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43556 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43553 CVE record

CVSS 7.4 High

NT OS Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43550 CVE record

CVSS 7.4 High

Windows Secure Channel Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Weak cryptography or TLS
Not analysed yet 8 Oct 2024
CVE-2024-43549 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43547 CVE record

CVSS 6.5 Medium

Windows Kerberos Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-325
Not analysed yet 8 Oct 2024
CVE-2024-43545 CVE record

CVSS 7.5 High

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43544 CVE record

CVSS 7.5 High

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43521 CVE record

CVSS 7.5 High

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-253
Not analysed yet 8 Oct 2024
CVE-2024-43520 CVE record

CVSS 5.0 Medium

Windows Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43517 CVE record

CVSS 8.8 High

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43514 CVE record

CVSS 7.8 High

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43509 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43501 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-43456 CVE record

CVSS 4.8 Medium

Windows Remote Desktop Services Tampering Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Broken access control
Not analysed yet 8 Oct 2024
CVE-2024-38212 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43453 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-38262 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-591
Not analysed yet 8 Oct 2024
CVE-2024-38265 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-38124 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Windows Netlogon Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Authentication bypass
Not analysed yet 8 Oct 2024
CVE-2024-38149 CVE record

CVSS 7.5 High

BranchCache Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-37983 CVE record

CVSS 6.7 Medium

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-37979 CVE record

CVSS 6.7 Medium

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-37982 CVE record

CVSS 6.7 Medium

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-37976 CVE record

CVSS 6.7 Medium

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43607 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43608 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43541 CVE record

CVSS 7.5 High

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43535 CVE record

CVSS 7.0 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43534 CVE record

CVSS 6.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43532 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Registry Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-636
Not analysed yet 8 Oct 2024
CVE-2024-43519 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 8 Oct 2024
CVE-2024-43518 CVE record

CVSS 8.8 High

Windows Telephony Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43515 CVE record

CVSS 7.5 High

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43506 CVE record

CVSS 7.5 High

BranchCache Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-38261 CVE record

CVSS 7.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43487 CVE record

CVSS 6.5 Medium

Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 10 Sept 2024
CVE-2024-30073 CVE record

CVSS 7.8 High

Windows Security Zone Mapping Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-41
Not analysed yet 10 Sept 2024
CVE-2024-43461 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows MSHTML Platform Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-451
Not analysed yet 10 Sept 2024
CVE-2024-43455 CVE record

CVSS 8.8 High

Windows Remote Desktop Licensing Service Spoofing Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-43454 CVE record

CVSS 7.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Path traversal
Not analysed yet 10 Sept 2024
CVE-2024-38263 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-591
Not analysed yet 10 Sept 2024
CVE-2024-38260 CVE record

CVSS 8.8 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38258 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Path traversal
Not analysed yet 10 Sept 2024
CVE-2024-38247 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38245 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38239 CVE record

CVSS 7.2 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Authentication bypass
Not analysed yet 10 Sept 2024
CVE-2024-38234 CVE record

CVSS 6.5 Medium

Windows Networking Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38231 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-38217 CVE record

CVSS 5.4 MediumCritical · KEVKEV

Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 10 Sept 2024
CVE-2024-38014 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Privilege escalation
Not analysed yet 10 Sept 2024
CVE-2024-43467 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Race condition
Not analysed yet 10 Sept 2024
CVE-2024-38256 CVE record

CVSS 5.5 Medium

Windows Kernel-Mode Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024