Advisories · Technology

Microsoft Windows Server 2019.

Every CVE that names Microsoft Windows Server 2019 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-43615 CVE record

CVSS 7.1 High

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-43607 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43608 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43581 CVE record

CVSS 7.1 High

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-43573 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Windows MSHTML Platform Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2024
CVE-2024-43554 CVE record

CVSS 5.5 Medium

Windows Kernel-Mode Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-212
Not analysed yet 8 Oct 2024
CVE-2024-43543 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Open redirect
Not analysed yet 8 Oct 2024
CVE-2024-43542 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43541 CVE record

CVSS 7.5 High

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43540 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43538 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43537 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43526 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43525 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43513 CVE record

CVSS 6.4 Medium

BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Oct 2024
CVE-2024-43506 CVE record

CVSS 7.5 High

BranchCache Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43502 CVE record

CVSS 7.1 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-38261 CVE record

CVSS 7.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43516 CVE record

CVSS 7.8 High

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-6769 CVE record

CVSS 8.4 High

Medium to High Integrity Privilege Escalation in Microsoft Windows
- Microsoft Windows 10
- Microsoft Windows 11
- CWE-426
- CWE-427
Not analysed yet 26 Sept 2024
CVE-2024-43487 CVE record

CVSS 6.5 Medium

Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 10 Sept 2024
CVE-2024-43455 CVE record

CVSS 8.8 High

Windows Remote Desktop Licensing Service Spoofing Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-43454 CVE record

CVSS 7.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Path traversal
Not analysed yet 10 Sept 2024
CVE-2024-38119 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38045 CVE record

CVSS 8.1 High

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-21416 CVE record

CVSS 8.1 High

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38263 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-591
Not analysed yet 10 Sept 2024
CVE-2024-38260 CVE record

CVSS 8.8 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38258 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Path traversal
Not analysed yet 10 Sept 2024
CVE-2024-38257 CVE record

CVSS 7.5 High

Microsoft AllJoyn API Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38247 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38244 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38243 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38238 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38237 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38235 CVE record

CVSS 6.5 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38231 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-38046 CVE record

CVSS 7.8 High

PowerShell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-43467 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Race condition
Not analysed yet 10 Sept 2024
CVE-2024-38256 CVE record

CVSS 5.5 Medium

Windows Kernel-Mode Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38254 CVE record

CVSS 5.5 Medium

Windows Authentication Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38252 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38242 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38241 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38240 CVE record

CVSS 8.1 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38236 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 10 Sept 2024
CVE-2024-38230 CVE record

CVSS 6.5 Medium

Windows Standards-Based Storage Management Service Denial of Service Vulnerability
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-37968 CVE record

CVSS 7.5 High

Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-345
Not analysed yet 13 Aug 2024
CVE-2024-38223 CVE record

CVSS 6.8 Medium

Windows Initial Machine Configuration Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2024-38215 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38214 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38120 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38187 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38186 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 13 Aug 2024
CVE-2024-38185 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38180 CVE record

CVSS 8.8 High

Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 13 Aug 2024
CVE-2024-38154 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38153 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 13 Aug 2024
CVE-2024-38152 CVE record

CVSS 7.8 High

Windows OLE Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38151 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024