Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-26226 CVE record

CVSS 6.5 Medium

Windows Distributed File System (DFS) Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26217 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26216 CVE record

CVSS 7.3 High

Windows File Server Resource Management Service Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Path traversal
Not analysed yet 9 Apr 2024
CVE-2024-26215 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Denial of service
Not analysed yet 9 Apr 2024
CVE-2024-26214 CVE record

CVSS 8.8 High

Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26213 CVE record

CVSS 7.0 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26212 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Denial of service
Not analysed yet 9 Apr 2024
CVE-2024-26211 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26208 CVE record

CVSS 7.2 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26207 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26244 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26242 CVE record

CVSS 7.0 High

Windows Telephony Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 9 Apr 2024
CVE-2024-26237 CVE record

CVSS 7.8 High

Windows Defender Credential Guard Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26236 CVE record

CVSS 7.0 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- CWE-591
Not analysed yet 9 Apr 2024
CVE-2024-26235 CVE record

CVSS 7.8 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Authentication bypass
Not analysed yet 9 Apr 2024
CVE-2024-26234 CVE record

CVSS 6.7 Medium

Proxy Driver Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 9 Apr 2024
CVE-2024-26229 CVE record

CVSS 7.8 High

Windows CSC Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26210 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26248 CVE record

CVSS 7.5 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Authentication bypass
Not analysed yet 9 Apr 2024
CVE-2024-26243 CVE record

CVSS 7.0 High

Windows USB Print Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-26233 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26231 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26227 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26224 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26223 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26222 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26221 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26220 CVE record

CVSS 5.0 Medium

Windows Mobile Hotspot Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26219 CVE record

CVSS 7.5 High

HTTP.sys Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26218 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 9 Apr 2024
CVE-2024-26209 CVE record

CVSS 5.5 Medium

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26202 CVE record

CVSS 7.2 High

DHCP Server Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26195 CVE record

CVSS 7.2 High

DHCP Server Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26194 CVE record

CVSS 7.4 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 9 Apr 2024
CVE-2024-26189 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Apr 2024
CVE-2024-26180 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26175 CVE record

CVSS 7.8 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26171 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26168 CVE record

CVSS 6.8 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-21447 CVE record

CVSS 7.8 High

Windows Authentication Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Path traversal
Not analysed yet 9 Apr 2024
CVE-2024-20693 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-426
Not analysed yet 9 Apr 2024
CVE-2024-20665 CVE record

CVSS 6.1 Medium

BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-20678 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-29988 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

SmartScreen Prompt Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-29066 CVE record

CVSS 7.2 High

Windows Distributed File System (DFS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Race condition
Not analysed yet 9 Apr 2024
CVE-2024-29064 CVE record

CVSS 6.2 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-130
Not analysed yet 9 Apr 2024
CVE-2024-29050 CVE record

CVSS 8.4 High

Windows Cryptographic Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 9 Apr 2024
CVE-2024-28905 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Privilege escalation
Not analysed yet 9 Apr 2024
CVE-2024-28903 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-28902 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-28901 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 9 Apr 2024
CVE-2024-28898 CVE record

CVSS 6.3 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28896 CVE record

CVSS 7.5 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28923 CVE record

CVSS 6.4 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-28919 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-28921 CVE record

CVSS 6.7 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-28922 CVE record

CVSS 4.1 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 9 Apr 2024
CVE-2024-28920 CVE record

CVSS 7.8 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Apr 2024
CVE-2024-26232 CVE record

CVSS 7.3 High

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Apr 2024
CVE-2024-26158 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Microsoft Install Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 9 Apr 2024