Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-21304 CVE record

CVSS 4.1 Medium

Trusted Compute Base Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 13 Feb 2024
CVE-2024-21371 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 13 Feb 2024
CVE-2024-21338 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 13 Feb 2024
CVE-2024-21314 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-21311 CVE record

CVSS 5.5 Medium

Windows Cryptographic Services Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-21310 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-197
Not analysed yet 9 Jan 2024
CVE-2024-21309 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-21306 CVE record

CVSS 5.7 Medium

Microsoft Bluetooth Driver Spoofing Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Authentication bypass
Not analysed yet 9 Jan 2024
CVE-2024-20692 CVE record

CVSS 5.7 Medium

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 9 Jan 2024
CVE-2024-20687 CVE record

CVSS 7.5 High

Microsoft AllJoyn API Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20686 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- CWE-591
Not analysed yet 9 Jan 2024
CVE-2024-20681 CVE record

CVSS 7.8 High

Windows Subsystem for Linux Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-21316 CVE record

CVSS 6.1 Medium

Windows Server Key Distribution Service Security Feature Bypass
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Jan 2024
CVE-2024-20664 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20663 CVE record

CVSS 6.5 Medium

Windows Message Queuing Client (MSMQC) Information Disclosure
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20662 CVE record

CVSS 4.9 Medium

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20661 CVE record

CVSS 7.5 High

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20660 CVE record

CVSS 6.5 Medium

Microsoft Message Queuing Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20655 CVE record

CVSS 6.6 Medium

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20653 CVE record

CVSS 7.8 High

Microsoft Common Log File System Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows 11 Version 23H2
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20652 CVE record

CVSS 8.1 High

Windows HTML Platforms Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 9 Jan 2024
CVE-2024-21313 CVE record

CVSS 5.3 Medium

Windows TCP/IP Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 9 Jan 2024
CVE-2024-21305 CVE record

CVSS 4.4 Medium

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 9 Jan 2024
CVE-2024-20700 CVE record

CVSS 7.5 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 9 Jan 2024
CVE-2024-20699 CVE record

CVSS 5.5 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-755
Not analysed yet 9 Jan 2024
CVE-2024-20698 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20697 CVE record

CVSS 7.3 HighCritical · CVSS 7+ and EPSS

Windows libarchive Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20696 CVE record

CVSS 7.3 High

Windows libarchive Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20694 CVE record

CVSS 5.5 Medium

Windows CoreMessaging Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20691 CVE record

CVSS 4.7 Medium

Windows Themes Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20683 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20682 CVE record

CVSS 7.8 High

Windows Cryptographic Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20680 CVE record

CVSS 6.5 Medium

Windows Message Queuing Client (MSMQC) Information Disclosure
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20658 CVE record

CVSS 7.8 High

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20657 CVE record

CVSS 7.0 High

Windows Group Policy Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 9 Jan 2024
CVE-2024-20654 CVE record

CVSS 8.0 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Jan 2024
CVE-2024-20674 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows Kerberos Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-305
Not analysed yet 9 Jan 2024
CVE-2024-20666 CVE record

CVSS 6.6 Medium

BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-20
Not analysed yet 9 Jan 2024
CVE-2022-44684 CVE record

CVSS 6.5 Medium

Windows Local Session Manager (LSM) Denial of Service Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 20 Dec 2023
CVE-2023-35622 CVE record

CVSS 7.5 High

Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Dec 2023
CVE-2023-35631 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
Not analysed yet 12 Dec 2023
CVE-2023-35630 CVE record

CVSS 8.8 High

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-35628 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows MSHTML Platform Remote Code Execution Vulnerability
- Microsoft Windows 11 Version 23H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-35644 CVE record

CVSS 7.8 High

Windows Sysmain Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-35643 CVE record

CVSS 7.5 High

DHCP Server Service Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-126
Not analysed yet 12 Dec 2023
CVE-2023-35642 CVE record

CVSS 6.5 Medium

Internet Connection Sharing (ICS) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-682
Not analysed yet 12 Dec 2023
CVE-2023-35641 CVE record

CVSS 8.8 High

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-682
Not analysed yet 12 Dec 2023
CVE-2023-35639 CVE record

CVSS 8.8 High

Microsoft ODBC Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-35638 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-126
Not analysed yet 12 Dec 2023
CVE-2023-36006 CVE record

CVSS 8.8 High

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-36005 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Telephony Server Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-591
Not analysed yet 12 Dec 2023
CVE-2023-36004 CVE record

CVSS 7.5 High

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Authentication bypass
Not analysed yet 12 Dec 2023
CVE-2023-36003 CVE record

CVSS 6.7 Medium

XAML Diagnostics Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-426
Not analysed yet 12 Dec 2023
CVE-2023-36012 CVE record

CVSS 5.3 Medium

DHCP Server Service Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-21740 CVE record

CVSS 7.8 High

Windows Media Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-36011 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-36696 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Dec 2023
CVE-2023-36025 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 14 Nov 2023
CVE-2023-36033 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023
CVE-2023-36028 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 14 Nov 2023