# Microsoft Windows Server, version 1903 (Server Core installation).

Every CVE that names Microsoft Windows Server, version 1903 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2019-0965.md)
  `CVE-2019-0965` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.6 High · Not analysed yet · Published 14 Aug 2019 · Tags: CWE-20
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-0723.md)
  `CVE-2019-0723` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2019
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-0718.md)
  `CVE-2019-0718` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2019
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-0717.md)
  `CVE-2019-0717` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 14 Aug 2019
- [Symlink following in Microsoft Windows Server and others](https://agentprime.io/advisories/CVE-2019-1130.md)
  `CVE-2019-1130` · CVE record: Microsoft Windows Server and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 29 Jul 2019 · Tags: Path traversal
- [Symlink following in Microsoft Windows and others](https://agentprime.io/advisories/CVE-2019-1129.md)
  `CVE-2019-1129` · CVE record: Microsoft Windows and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 29 Jul 2019 · Tags: Path traversal
- [A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1128.md)
  `CVE-2019-1128` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1127.md)
  `CVE-2019-1127` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.21 · Not analysed yet · Published 29 Jul 2019
- [A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an att…](https://agentprime.io/advisories/CVE-2019-1126.md)
  `CVE-2019-1126` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1124.md)
  `CVE-2019-1124` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.18 · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1123.md)
  `CVE-2019-1123` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1122.md)
  `CVE-2019-1122` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1121.md)
  `CVE-2019-1121` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1120.md)
  `CVE-2019-1120` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.17 · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1118.md)
  `CVE-2019-1118` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.24 · Not analysed yet · Published 29 Jul 2019
- [A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1117.md)
  `CVE-2019-1117` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.24 · Not analysed yet · Published 29 Jul 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows RDP client improperly…](https://agentprime.io/advisories/CVE-2019-1108.md)
  `CVE-2019-1108` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.11 · Not analysed yet · Published 29 Jul 2019
- [Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…](https://agentprime.io/advisories/CVE-2019-1102.md)
  `CVE-2019-1102` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.11 · Not analysed yet · Published 29 Jul 2019
- [An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1097.md)
  `CVE-2019-1097` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1096.md)
  `CVE-2019-1096` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-1095.md)
  `CVE-2019-1095` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-1094.md)
  `CVE-2019-1094` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1093.md)
  `CVE-2019-1093` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1091.md)
  `CVE-2019-1091` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles…](https://agentprime.io/advisories/CVE-2019-1090.md)
  `CVE-2019-1090` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege exists in Windows Audio Service…](https://agentprime.io/advisories/CVE-2019-1088.md)
  `CVE-2019-1088` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege exists in Windows Audio Service…](https://agentprime.io/advisories/CVE-2019-1087.md)
  `CVE-2019-1087` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege exists in Windows Audio Service…](https://agentprime.io/advisories/CVE-2019-1086.md)
  `CVE-2019-1086` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles…](https://agentprime.io/advisories/CVE-2019-1085.md)
  `CVE-2019-1085` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows where certain…](https://agentprime.io/advisories/CVE-2019-1074.md)
  `CVE-2019-1074` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-1073.md)
  `CVE-2019-1073` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-1071.md)
  `CVE-2019-1071` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows kernel fails to properly…](https://agentprime.io/advisories/CVE-2019-1067.md)
  `CVE-2019-1067` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER)…](https://agentprime.io/advisories/CVE-2019-1037.md)
  `CVE-2019-1037` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF)…](https://agentprime.io/advisories/CVE-2019-1006.md)
  `CVE-2019-1006` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses.](https://agentprime.io/advisories/CVE-2019-0975.md)
  `CVE-2019-0975` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Se…](https://agentprime.io/advisories/CVE-2019-0966.md)
  `CVE-2019-0966` · CVE record: Microsoft Windows Server and 3 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0880.md)
  `CVE-2019-0880` · CVE record: Microsoft Windows Server and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 15 Jul 2019
- [A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection…](https://agentprime.io/advisories/CVE-2019-0865.md)
  `CVE-2019-0865` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial of Service Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0811.md)
  `CVE-2019-0811` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows Server: A memory corruption vulnerability exists in the Windows Server DHCP service when an…](https://agentprime.io/advisories/CVE-2019-0785.md)
  `CVE-2019-0785` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · EPSS 0.50 · Not analysed yet · Published 15 Jul 2019
- [Task Scheduler Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1069.md)
  `CVE-2019-1069` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 12 Jun 2019 · Tags: Path traversal
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1065.md)
  `CVE-2019-1065` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2019
- [Windows Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1064.md)
  `CVE-2019-1064` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 12 Jun 2019 · Tags: Path traversal
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1053.md)
  `CVE-2019-1053` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 12 Jun 2019
- [Windows GDI Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-1046.md)
  `CVE-2019-1046` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 12 Jun 2019
- [Comctl32 Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2019-1043.md)
  `CVE-2019-1043` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 12 Jun 2019
- [Windows Kernel Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1041.md)
  `CVE-2019-1041` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Jun 2019
- [Windows NTLM Tampering Vulnerability](https://agentprime.io/advisories/CVE-2019-1040.md)
  `CVE-2019-1040` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 5.3 Medium · EPSS 0.48 · Not analysed yet · Published 12 Jun 2019
- [Windows Audio Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1028.md)
  `CVE-2019-1028` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2019
- [Windows Audio Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1027.md)
  `CVE-2019-1027` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2019
- [Windows Audio Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1026.md)
  `CVE-2019-1026` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2019
- [Windows Audio Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1022.md)
  `CVE-2019-1022` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2019
- [Windows Audio Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1021.md)
  `CVE-2019-1021` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2019
- [Microsoft Windows Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2019-1019.md)
  `CVE-2019-1019` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 8.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 12 Jun 2019
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1014.md)
  `CVE-2019-1014` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 7.0 High · Not analysed yet · Published 12 Jun 2019
- [Windows GDI Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-1012.md)
  `CVE-2019-1012` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 12 Jun 2019
- [Windows Audio Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-1007.md)
  `CVE-2019-1007` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2019
- [Windows Storage Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-0998.md)
  `CVE-2019-0998` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2019
- [Windows User Profile Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2019-0986.md)
  `CVE-2019-0986` · CVE record: Microsoft Windows 10 Version 1703 and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 12 Jun 2019

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-version-1903-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-version-1903-server-core-installation.md?cursor=WyIyMDE5LTA2LTEyVDEzOjQ5OjM5LjAwMDAwMFoiLCJDVkUtMjAxOS0wOTg2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-version-1903-server-core-installation&cursor=WyIyMDE5LTA4LTE0VDIwOjU1OjAyLjAwMDAwMFoiLCJDVkUtMjAxOS0xMDU3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-version-1903-server-core-installation/?cursor=WyIyMDE5LTA4LTE0VDIwOjU1OjAyLjAwMDAwMFoiLCJDVkUtMjAxOS0xMDU3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.