Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-38135 CVE record

CVSS 7.8 High

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 version 22H2
- CWE-126
Not analysed yet 13 Aug 2024
CVE-2024-38134 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38133 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-138
Not analysed yet 13 Aug 2024
CVE-2024-38132 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38131 CVE record

CVSS 8.8 High

Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- CWE-591
Not analysed yet 13 Aug 2024
CVE-2024-38130 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38128 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38127 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-126
Not analysed yet 13 Aug 2024
CVE-2024-38126 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38125 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 13 Aug 2024
CVE-2024-38122 CVE record

CVSS 5.5 Medium

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38121 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38118 CVE record

CVSS 5.5 Medium

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38117 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38116 CVE record

CVSS 8.8 High

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38115 CVE record

CVSS 8.8 High

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38114 CVE record

CVSS 8.8 High

Windows IP Routing Management Snapin Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38107 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38106 CVE record

CVSS 7.0 HighCritical · KEVKEV

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 13 Aug 2024
CVE-2024-38063 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38213 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Windows Mark of the Web Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 13 Aug 2024
CVE-2024-38199 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38198 CVE record

CVSS 7.5 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-345
Not analysed yet 13 Aug 2024
CVE-2024-38196 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- CWE-20
Not analysed yet 13 Aug 2024
CVE-2024-38193 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38191 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 13 Aug 2024
CVE-2024-38184 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38178 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV

Scripting Engine Memory Corruption Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38202 CVE record

CVSS 7.3 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 8 Aug 2024
CVE-2024-21302 CVE record

CVSS 6.7 Medium

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 8 Aug 2024
CVE-2024-21417 CVE record

CVSS 8.8 High

Windows Text Services Framework Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 9 Jul 2024
CVE-2024-38105 CVE record

CVSS 6.5 Medium

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Jul 2024
CVE-2024-38101 CVE record

CVSS 6.5 Medium

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38079 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38076 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38074 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38073 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38070 CVE record

CVSS 7.8 High

Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Jul 2024
CVE-2024-38069 CVE record

CVSS 7.0 High

Windows Enroll Engine Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 9 Jul 2024
CVE-2024-38068 CVE record

CVSS 7.5 High

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-38067 CVE record

CVSS 7.5 High

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-38065 CVE record

CVSS 6.8 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38058 CVE record

CVSS 6.8 Medium

BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 9 Jul 2024
CVE-2024-38057 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38053 CVE record

CVSS 8.8 High

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38052 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Jul 2024
CVE-2024-38050 CVE record

CVSS 7.8 High

Windows Workstation Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38049 CVE record

CVSS 6.6 Medium

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 9 Jul 2024
CVE-2024-38048 CVE record

CVSS 6.5 Medium

Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38047 CVE record

CVSS 7.8 High

PowerShell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Jul 2024
CVE-2024-38044 CVE record

CVSS 7.2 High

DHCP Server Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-197
Not analysed yet 9 Jul 2024
CVE-2024-38033 CVE record

CVSS 7.3 High

PowerShell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Jul 2024
CVE-2024-38031 CVE record

CVSS 7.5 High

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-38028 CVE record

CVSS 7.2 High

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38027 CVE record

CVSS 6.5 Medium

Windows Line Printer Daemon Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Denial of service
Not analysed yet 9 Jul 2024
CVE-2024-38019 CVE record

CVSS 7.2 High

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jul 2024
CVE-2024-38017 CVE record

CVSS 5.5 Medium

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 9 Jul 2024
CVE-2024-38011 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-130
Not analysed yet 9 Jul 2024
CVE-2024-38010 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-130
Not analysed yet 9 Jul 2024
CVE-2024-37989 CVE record

CVSS 8.0 High

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-130
Not analysed yet 9 Jul 2024