Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-26205 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26200 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26179 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26172 CVE record

CVSS 5.5 Medium

Windows DWM Core Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26256 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Libarchive Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26255 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-26254 CVE record

CVSS 7.5 High

Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26253 CVE record

CVSS 6.8 Medium

Windows rndismp6.sys Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Apr 2024
CVE-2024-26252 CVE record

CVSS 6.8 Medium

Windows rndismp6.sys Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26250 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-20669 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-26181 CVE record

CVSS 5.5 Medium

Windows Kernel Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-26178 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26177 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 12 Mar 2024
CVE-2024-26176 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 12 Mar 2024
CVE-2024-26174 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26173 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-26170 CVE record

CVSS 7.8 High

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- CWE-20
Not analysed yet 12 Mar 2024
CVE-2024-26169 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Error Reporting Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Privilege escalation
Not analysed yet 12 Mar 2024
CVE-2024-26166 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26162 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-681
Not analysed yet 12 Mar 2024
CVE-2024-26160 CVE record

CVSS 5.5 Medium

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-126
Not analysed yet 12 Mar 2024
CVE-2024-21440 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21437 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21436 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 12 Mar 2024
CVE-2024-21434 CVE record

CVSS 7.8 High

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21433 CVE record

CVSS 7.0 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Mar 2024
CVE-2024-21432 CVE record

CVSS 7.0 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 12 Mar 2024
CVE-2024-21431 CVE record

CVSS 7.8 High

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Broken access control
Not analysed yet 12 Mar 2024
CVE-2024-21427 CVE record

CVSS 7.5 High

Windows Kerberos Security Feature Bypass Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Mar 2024
CVE-2024-21408 CVE record

CVSS 5.5 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 12 Mar 2024
CVE-2024-21407 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26161 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-26190 CVE record

CVSS 7.5 High

Microsoft QUIC Denial of Service Vulnerability
- Microsoft Visual Studio 2022 version 17.9
- Microsoft Windows Server 2022
- Denial of service
Not analysed yet 12 Mar 2024
CVE-2024-26159 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21451 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21450 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21446 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 12 Mar 2024
CVE-2024-21445 CVE record

CVSS 7.0 High

Windows USB Print Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21444 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21443 CVE record

CVSS 7.3 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21442 CVE record

CVSS 7.8 High

Windows USB Print Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- CWE-170
Not analysed yet 12 Mar 2024
CVE-2024-21441 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21439 CVE record

CVSS 7.0 High

Windows Telephony Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21438 CVE record

CVSS 7.5 High

Microsoft AllJoyn API Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 12 Mar 2024
CVE-2024-21430 CVE record

CVSS 5.7 Medium

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Mar 2024
CVE-2024-21429 CVE record

CVSS 6.8 Medium

Windows USB Hub Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 12 Mar 2024
CVE-2024-21412 CVE record

CVSS 8.1 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Internet Shortcut Files Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-693
Not analysed yet 13 Feb 2024
CVE-2024-21377 CVE record

CVSS 5.5 Medium

Windows DNS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-197
Not analysed yet 13 Feb 2024
CVE-2024-21362 CVE record

CVSS 5.5 Medium

Windows Kernel Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 13 Feb 2024
CVE-2024-21353 CVE record

CVSS 8.8 High

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21348 CVE record

CVSS 7.5 High

Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21346 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21345 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21344 CVE record

CVSS 5.9 Medium

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21343 CVE record

CVSS 5.9 Medium

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21342 CVE record

CVSS 7.5 High

Windows DNS Client Denial of Service Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Denial of service
Not analysed yet 13 Feb 2024
CVE-2024-21341 CVE record

CVSS 6.8 Medium

Windows Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21339 CVE record

CVSS 6.4 Medium

Windows USB Generic Parent Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-20684 CVE record

CVSS 6.5 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- CWE-20
Not analysed yet 13 Feb 2024