Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-49076 CVE record

CVSS 7.8 High

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Authentication bypass
Not analysed yet 10 Dec 2024
CVE-2024-49075 CVE record

CVSS 7.5 High

Windows Remote Desktop Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 10 Dec 2024
CVE-2024-49132 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49129 CVE record

CVSS 7.5 High

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Denial of service
Not analysed yet 10 Dec 2024
CVE-2024-49125 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49123 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49120 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-453
Not analysed yet 10 Dec 2024
CVE-2024-49119 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49117 CVE record

CVSS 8.8 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-393
Not analysed yet 10 Dec 2024
CVE-2024-49115 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49111 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49108 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49107 CVE record

CVSS 7.3 High

WmsRepair Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
- Broken access control
Not analysed yet 10 Dec 2024
CVE-2024-49106 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49103 CVE record

CVSS 4.3 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49101 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49099 CVE record

CVSS 4.3 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49098 CVE record

CVSS 4.3 Medium

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49097 CVE record

CVSS 7.0 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49094 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49092 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49091 CVE record

CVSS 7.2 High

Windows Domain Name Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49087 CVE record

CVSS 4.6 Medium

Windows Mobile Broadband Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 10 Dec 2024
CVE-2024-49086 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49085 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49073 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-20
Not analysed yet 10 Dec 2024
CVE-2024-49039 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Nov 2024
CVE-2024-49019 CVE record

CVSS 7.8 High

Active Directory Certificate Services Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Authentication bypass
Not analysed yet 12 Nov 2024
CVE-2024-38203 CVE record

CVSS 6.2 Medium

Windows Package Library Manager Information Disclosure Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- CWE-693
Not analysed yet 12 Nov 2024
CVE-2024-43642 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows SMB Denial of Service Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43641 CVE record

CVSS 7.8 High

Windows Registry Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43639 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows KDC Proxy Remote Code Execution Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- CWE-197
Not analysed yet 12 Nov 2024
CVE-2024-43636 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43635 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43629 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43624 CVE record

CVSS 8.8 High

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43622 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43621 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43620 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-49046 CVE record

CVSS 7.8 High

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Nov 2024
CVE-2024-38264 CVE record

CVSS 5.9 Medium

Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- CWE-591
Not analysed yet 12 Nov 2024
CVE-2024-43452 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Registry Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 12 Nov 2024
CVE-2024-43451 CVE record

CVSS 6.5 MediumCritical · KEVKEV

NTLM Hash Disclosure Spoofing Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Path traversal
Not analysed yet 12 Nov 2024
CVE-2024-43450 CVE record

CVSS 7.5 High

Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-924
Not analysed yet 12 Nov 2024
CVE-2024-43449 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43646 CVE record

CVSS 6.7 Medium

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43644 CVE record

CVSS 7.8 High

Windows Client-Side Caching Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43643 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2025
- Microsoft Windows Server 2025 (Server Core installation)
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43638 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43637 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43634 CVE record

CVSS 6.8 Medium

Windows USB Video Class System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43631 CVE record

CVSS 6.7 Medium

Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43630 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43628 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43627 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43626 CVE record

CVSS 7.8 High

Windows Telephony Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43625 CVE record

CVSS 8.1 High

Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
- Microsoft Windows Server 2022
- Microsoft Windows 11 version 22H2
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43623 CVE record

CVSS 7.8 High

Windows NT OS Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-43611 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024
CVE-2024-43593 CVE record

CVSS 8.8 High

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 R2 Service Pack 1
- Memory corruption
- CWE-20
Not analysed yet 8 Oct 2024