Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-43592 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43589 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43585 CVE record

CVSS 5.5 Medium

Code Integrity Guard Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-693
Not analysed yet 8 Oct 2024
CVE-2024-43584 CVE record

CVSS 7.7 High

Windows Scripting Engine Security Feature Bypass Vulnerability
- Microsoft Windows 11 version 21H2
- Microsoft Windows 11 version 22H2
- CWE-693
Not analysed yet 8 Oct 2024
CVE-2024-43582 CVE record

CVSS 8.1 High

Remote Desktop Protocol Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43575 CVE record

CVSS 7.5 High

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43574 CVE record

CVSS 8.3 High

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43567 CVE record

CVSS 7.5 High

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43565 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43564 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43563 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-591
Not analysed yet 8 Oct 2024
CVE-2024-43562 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43561 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43560 CVE record

CVSS 7.8 High

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43559 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43558 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43557 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43555 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43552 CVE record

CVSS 7.3 High

Windows Shell Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43551 CVE record

CVSS 7.8 High

Windows Storage Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-43550 CVE record

CVSS 7.4 High

Windows Secure Channel Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Weak cryptography or TLS
Not analysed yet 8 Oct 2024
CVE-2024-43549 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43546 CVE record

CVSS 5.6 Medium

Windows Cryptographic Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Information disclosure
Not analysed yet 8 Oct 2024
CVE-2024-43545 CVE record

CVSS 7.5 High

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43544 CVE record

CVSS 7.5 High

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43536 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Open redirect
Not analysed yet 8 Oct 2024
CVE-2024-43528 CVE record

CVSS 7.8 High

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43524 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-118
Not analysed yet 8 Oct 2024
CVE-2024-43523 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43521 CVE record

CVSS 7.5 High

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-253
Not analysed yet 8 Oct 2024
CVE-2024-43514 CVE record

CVSS 7.8 High

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43511 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 8 Oct 2024
CVE-2024-43456 CVE record

CVSS 4.8 Medium

Windows Remote Desktop Services Tampering Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Broken access control
Not analysed yet 8 Oct 2024
CVE-2024-30092 CVE record

CVSS 8.0 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
- CWE-829
Not analysed yet 8 Oct 2024
CVE-2024-38212 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43453 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-38262 CVE record

CVSS 7.5 High

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- CWE-591
Not analysed yet 8 Oct 2024
CVE-2024-38265 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-38124 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Windows Netlogon Elevation of Privilege Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Authentication bypass
Not analysed yet 8 Oct 2024
CVE-2024-38129 CVE record

CVSS 7.5 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Broken access control
Not analysed yet 8 Oct 2024
CVE-2024-38029 CVE record

CVSS 7.5 High

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-37983 CVE record

CVSS 6.7 Medium

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-37982 CVE record

CVSS 6.7 Medium

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-37976 CVE record

CVSS 6.7 Medium

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-20659 CVE record

CVSS 7.1 High

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43500 CVE record

CVSS 5.5 Medium

Windows Resilient File System (ReFS) Information Disclosure Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-126
Not analysed yet 8 Oct 2024
CVE-2024-43615 CVE record

CVSS 7.1 High

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-43607 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43608 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43581 CVE record

CVSS 7.1 High

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-43573 CVE record

CVSS 6.5 MediumCritical · KEVKEV

Windows MSHTML Platform Spoofing Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2024
CVE-2024-43554 CVE record

CVSS 5.5 Medium

Windows Kernel-Mode Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-212
Not analysed yet 8 Oct 2024
CVE-2024-43543 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Open redirect
Not analysed yet 8 Oct 2024
CVE-2024-43542 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43541 CVE record

CVSS 7.5 High

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Denial of service
Not analysed yet 8 Oct 2024
CVE-2024-43540 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43538 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43537 CVE record

CVSS 6.5 Medium

Windows Mobile Broadband Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43533 CVE record

CVSS 8.8 High

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Microsoft Windows 11 version 21H2
- Memory corruption
Not analysed yet 8 Oct 2024
CVE-2024-43529 CVE record

CVSS 7.3 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 8 Oct 2024