Advisories · Technology

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation).

Every CVE that names Microsoft Windows Server 2022, 23H2 Edition (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-21334 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21333 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21311 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows NTLM V1 Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Authentication bypass
Not analysed yet 14 Jan 2025
CVE-2025-21326 CVE record

CVSS 7.8 High

Internet Explorer Remote Code Execution Vulnerability
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Microsoft Windows Server 2025
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21313 CVE record

CVSS 6.5 Medium

Windows Security Account Manager (SAM) Denial of Service Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21218 CVE record

CVSS 7.5 High

Windows Kerberos Denial of Service Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21378 CVE record

CVSS 7.8 High

Windows CSC Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21374 CVE record

CVSS 5.5 Medium

Windows CSC Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21372 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21340 CVE record

CVSS 5.5 Medium

Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21323 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21317 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21312 CVE record

CVSS 2.4 Low

Windows Smart Card Reader Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21292 CVE record

CVSS 8.8 High

Windows Search Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Code injection
Not analysed yet 14 Jan 2025
CVE-2025-21275 CVE record

CVSS 7.8 High

Windows App Package Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21274 CVE record

CVSS 5.5 Medium

Windows Event Tracing Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Path traversal
Not analysed yet 14 Jan 2025
CVE-2025-21229 CVE record

CVSS 6.6 Medium

Windows Digital Media Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21225 CVE record

CVSS 5.9 Medium

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21224 CVE record

CVSS 8.1 High

Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
- CWE-591
Not analysed yet 14 Jan 2025
CVE-2025-21213 CVE record

CVSS 4.6 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21211 CVE record

CVSS 6.8 Medium

Secure Boot Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 14 Jan 2025
CVE-2025-21202 CVE record

CVSS 6.1 Medium

Windows Recovery Environment Agent Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21207 CVE record

CVSS 7.5 High

Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21193 CVE record

CVSS 6.5 Medium

Active Directory Federation Server Spoofing Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Cross-site request forgery (CSRF)
Not analysed yet 14 Jan 2025
CVE-2025-21335 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21330 CVE record

CVSS 7.5 High

Windows Remote Desktop Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Denial of service
Not analysed yet 14 Jan 2025
CVE-2025-21278 CVE record

CVSS 6.2 Medium

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Race condition
Not analysed yet 14 Jan 2025
CVE-2025-21219 CVE record

CVSS 4.3 Medium

MapUrlToZone Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-41
Not analysed yet 14 Jan 2025
CVE-2025-21382 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21321 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21318 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21316 CVE record

CVSS 5.5 Medium

Windows Kernel Memory Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21315 CVE record

CVSS 7.8 High

Microsoft Brokering File System Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21314 CVE record

CVSS 6.5 Medium

Windows SmartScreen Spoofing Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-451
Not analysed yet 14 Jan 2025
CVE-2025-21309 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- CWE-591
Not analysed yet 14 Jan 2025
CVE-2025-21301 CVE record

CVSS 6.5 Medium

Windows Geolocation Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21299 CVE record

CVSS 7.1 High

Windows Kerberos Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Information disclosure
Not analysed yet 14 Jan 2025
CVE-2025-21297 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21293 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Broken access control
Not analysed yet 14 Jan 2025
CVE-2025-21291 CVE record

CVSS 8.8 High

Windows Direct Show Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21284 CVE record

CVSS 5.5 Medium

Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2025-21281 CVE record

CVSS 7.8 High

Microsoft COM for Windows Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21280 CVE record

CVSS 5.5 Medium

Windows Virtual Trusted Platform Module Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2025-21257 CVE record

CVSS 5.5 Medium

Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21248 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21241 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21239 CVE record

CVSS 8.8 High

Windows Telephony Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 14 Jan 2025
CVE-2025-21235 CVE record

CVSS 7.8 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2025-21234 CVE record

CVSS 7.8 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- CWE-20
Not analysed yet 14 Jan 2025
CVE-2024-49128 CVE record

CVSS 8.1 High

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49116 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Remote Desktop Services Remote Code Execution Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49114 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- CWE-820
Not analysed yet 10 Dec 2024
CVE-2024-49110 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49109 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49095 CVE record

CVSS 7.0 High

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
- CWE-591
Not analysed yet 10 Dec 2024
CVE-2024-49083 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49081 CVE record

CVSS 6.6 Medium

Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49079 CVE record

CVSS 7.8 High

Input Method Editor (IME) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49078 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024
CVE-2024-49077 CVE record

CVSS 6.8 Medium

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Memory corruption
Not analysed yet 10 Dec 2024