Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-43526 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43525 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43513 CVE record

CVSS 6.4 Medium

BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 8 Oct 2024
CVE-2024-43508 CVE record

CVSS 5.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-38261 CVE record

CVSS 7.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43516 CVE record

CVSS 7.8 High

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43495 CVE record

CVSS 7.3 High

Windows libarchive Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-43455 CVE record

CVSS 8.8 High

Windows Remote Desktop Licensing Service Spoofing Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-43454 CVE record

CVSS 7.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Path traversal
Not analysed yet 10 Sept 2024
CVE-2024-38119 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38045 CVE record

CVSS 8.1 High

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-21416 CVE record

CVSS 8.1 High

Windows TCP/IP Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38263 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-591
Not analysed yet 10 Sept 2024
CVE-2024-38260 CVE record

CVSS 8.8 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38259 CVE record

CVSS 8.8 High

Microsoft Management Console Remote Code Execution Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38258 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Path traversal
Not analysed yet 10 Sept 2024
CVE-2024-38257 CVE record

CVSS 7.5 High

Microsoft AllJoyn API Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38248 CVE record

CVSS 7.0 High

Windows Storage Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38246 CVE record

CVSS 7.0 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38244 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38243 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38238 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38237 CVE record

CVSS 7.8 High

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38235 CVE record

CVSS 6.5 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38231 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Licensing Service Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Broken access control
Not analysed yet 10 Sept 2024
CVE-2024-38046 CVE record

CVSS 7.8 High

PowerShell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-43467 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Race condition
Not analysed yet 10 Sept 2024
CVE-2024-38254 CVE record

CVSS 5.5 Medium

Windows Authentication Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38253 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38252 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38242 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38241 CVE record

CVSS 7.8 High

Kernel Streaming Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 10 Sept 2024
CVE-2024-38240 CVE record

CVSS 8.1 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Sept 2024
CVE-2024-38236 CVE record

CVSS 7.5 High

DHCP Server Service Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 10 Sept 2024
CVE-2024-37968 CVE record

CVSS 7.5 High

Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-345
Not analysed yet 13 Aug 2024
CVE-2024-38223 CVE record

CVSS 6.8 Medium

Windows Initial Machine Configuration Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 13 Aug 2024
CVE-2024-38215 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38214 CVE record

CVSS 6.5 Medium

Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38120 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38187 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38186 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 13 Aug 2024
CVE-2024-38185 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38180 CVE record

CVSS 8.8 High

Windows SmartScreen Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CWE-693
Not analysed yet 13 Aug 2024
CVE-2024-38154 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38153 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 13 Aug 2024
CVE-2024-38152 CVE record

CVSS 7.8 High

Windows OLE Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38151 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38150 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38148 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Secure Channel Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38147 CVE record

CVSS 7.8 High

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38146 CVE record

CVSS 7.5 High

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38145 CVE record

CVSS 7.5 High

Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38144 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38143 CVE record

CVSS 4.2 Medium

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Authentication bypass
Not analysed yet 13 Aug 2024
CVE-2024-38142 CVE record

CVSS 7.8 High

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38141 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38140 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38138 CVE record

CVSS 7.5 High

Windows Deployment Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Memory corruption
Not analysed yet 13 Aug 2024
CVE-2024-38137 CVE record

CVSS 7.0 High

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 21H2
- Memory corruption
- CWE-591
Not analysed yet 13 Aug 2024
CVE-2024-38136 CVE record

CVSS 7.0 High

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Aug 2024