# Microsoft Windows Server, version 1903 (Server Core installation).

Every CVE that names Microsoft Windows Server, version 1903 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1476.md)
  `CVE-2019-1476` · CVE record: Microsoft Windows 10 Version 1909 for ARM64-based Systems and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-1474.md)
  `CVE-2019-1474` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1472.md)
  `CVE-2019-1472` · CVE record: Microsoft Windows 10 Version 1909 for 32-bit Systems and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails…](https://agentprime.io/advisories/CVE-2019-1471.md)
  `CVE-2019-1471` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [Microsoft Windows: An information disclosure vulnerability exists when Windows Hyper-V on a host operating…](https://agentprime.io/advisories/CVE-2019-1470.md)
  `CVE-2019-1470` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1469.md)
  `CVE-2019-1469` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1468.md)
  `CVE-2019-1468` · CVE record: Microsoft Windows 10 Version 1909 for x64-based Systems and 4 more · No CVSS score · EPSS 0.18 · Not analysed yet · Published 10 Dec 2019
- [An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1467.md)
  `CVE-2019-1467` · CVE record: Microsoft Windows Server, version 1909 (Server Core installation) and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-1466.md)
  `CVE-2019-1466` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1465.md)
  `CVE-2019-1465` · CVE record: Microsoft Windows 10 Version 1909 for ARM64-based Systems and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Pr…](https://agentprime.io/advisories/CVE-2019-1453.md)
  `CVE-2019-1453` · CVE record: Microsoft Windows 10 Version 1909 for 32-bit Systems and 4 more · No CVSS score · Not analysed yet · Published 10 Dec 2019
- [Microsoft Windows: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe…](https://agentprime.io/advisories/CVE-2019-1456.md)
  `CVE-2019-1456` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1440.md)
  `CVE-2019-1440` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-1439.md)
  `CVE-2019-1439` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.75 · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Graphics Component…](https://agentprime.io/advisories/CVE-2019-1438.md)
  `CVE-2019-1438` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Graphics Component…](https://agentprime.io/advisories/CVE-2019-1437.md)
  `CVE-2019-1437` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1436.md)
  `CVE-2019-1436` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Graphics Component…](https://agentprime.io/advisories/CVE-2019-1435.md)
  `CVE-2019-1435` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Graphics Component…](https://agentprime.io/advisories/CVE-2019-1433.md)
  `CVE-2019-1433` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could ga…](https://agentprime.io/advisories/CVE-2019-1430.md)
  `CVE-2019-1430` · CVE record: Microsoft Windows 10 Version 1903 for 32-bit Systems and 3 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A security feature bypass vulnerability exists when Windows Netlogon improperly handles a…](https://agentprime.io/advisories/CVE-2019-1424.md)
  `CVE-2019-1424` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations, aka 'Windows Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1423.md)
  `CVE-2019-1423` · CVE record: Microsoft Windows 10 Version 1903 for 32-bit Systems and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles…](https://agentprime.io/advisories/CVE-2019-1422.md)
  `CVE-2019-1422` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file…](https://agentprime.io/advisories/CVE-2019-1420.md)
  `CVE-2019-1420` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe…](https://agentprime.io/advisories/CVE-2019-1419.md)
  `CVE-2019-1419` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An information vulnerability exists when Windows Modules Installer Service improperly…](https://agentprime.io/advisories/CVE-2019-1418.md)
  `CVE-2019-1418` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…](https://agentprime.io/advisories/CVE-2019-1417.md)
  `CVE-2019-1417` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists due to a race condition in Windows…](https://agentprime.io/advisories/CVE-2019-1416.md)
  `CVE-2019-1416` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows Installer because of the way…](https://agentprime.io/advisories/CVE-2019-1415.md)
  `CVE-2019-1415` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1411.md)
  `CVE-2019-1411` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows Remote Procedure Call…](https://agentprime.io/advisories/CVE-2019-1409.md)
  `CVE-2019-1409` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-1408.md)
  `CVE-2019-1408` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-1406.md)
  `CVE-2019-1406` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.13 · Not analysed yet · Published 12 Nov 2019
- [Improper privilege management in Microsoft Windows and others](https://agentprime.io/advisories/CVE-2019-1405.md)
  `CVE-2019-1405` · CVE record: Microsoft Windows and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.30 · Not analysed yet · Published 12 Nov 2019 · Tags: Privilege escalation
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to…](https://agentprime.io/advisories/CVE-2019-1399.md)
  `CVE-2019-1399` · CVE record: Microsoft Windows and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails…](https://agentprime.io/advisories/CVE-2019-1398.md)
  `CVE-2019-1398` · CVE record: Microsoft Windows and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails…](https://agentprime.io/advisories/CVE-2019-1397.md)
  `CVE-2019-1397` · CVE record: Microsoft Windows and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-1396.md)
  `CVE-2019-1396` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-1395.md)
  `CVE-2019-1395` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-1394.md)
  `CVE-2019-1394` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-1393.md)
  `CVE-2019-1393` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…](https://agentprime.io/advisories/CVE-2019-1391.md)
  `CVE-2019-1391` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Improper privilege management in Microsoft Windows and others](https://agentprime.io/advisories/CVE-2019-1388.md)
  `CVE-2019-1388` · CVE record: Microsoft Windows and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 12 Nov 2019 · Tags: Privilege escalation
- [Symlink following in Microsoft Windows and others](https://agentprime.io/advisories/CVE-2019-1385.md)
  `CVE-2019-1385` · CVE record: Microsoft Windows and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 12 Nov 2019 · Tags: Path traversal
- [Microsoft Windows: A security feature bypass vulnerability exists where a NETLOGON message is able to obtain…](https://agentprime.io/advisories/CVE-2019-1384.md)
  `CVE-2019-1384` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege…](https://agentprime.io/advisories/CVE-2019-1382.md)
  `CVE-2019-1382` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations, aka 'Microsoft Windows Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1381.md)
  `CVE-2019-1381` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1380.md)
  `CVE-2019-1380` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1374.md)
  `CVE-2019-1374` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly…](https://agentprime.io/advisories/CVE-2019-1324.md)
  `CVE-2019-1324` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…](https://agentprime.io/advisories/CVE-2019-1310.md)
  `CVE-2019-1310` · CVE record: Microsoft Windows and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…](https://agentprime.io/advisories/CVE-2019-1309.md)
  `CVE-2019-1309` · CVE record: Microsoft Windows and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a…](https://agentprime.io/advisories/CVE-2019-0721.md)
  `CVE-2019-0721` · CVE record: Microsoft Windows and 3 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 12 Nov 2019
- [A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V…](https://agentprime.io/advisories/CVE-2019-0719.md)
  `CVE-2019-0719` · CVE record: Microsoft Windows Server and 3 more · No CVSS score · EPSS 0.11 · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…](https://agentprime.io/advisories/CVE-2019-0712.md)
  `CVE-2019-0712` · CVE record: Microsoft Windows and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A security feature bypass exists when Windows Secure Boot improperly restricts access to…](https://agentprime.io/advisories/CVE-2019-1368.md)
  `CVE-2019-1368` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability…](https://agentprime.io/advisories/CVE-2019-1365.md)
  `CVE-2019-1365` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-1359.md)
  `CVE-2019-1359` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-1358.md)
  `CVE-2019-1358` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.76 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…](https://agentprime.io/advisories/CVE-2019-1347.md)
  `CVE-2019-1347` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.15 · Not analysed yet · Published 10 Oct 2019

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-version-1903-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-version-1903-server-core-installation.md?cursor=WyIyMDE5LTEwLTEwVDEzOjI4OjQyLjAwMDAwMFoiLCJDVkUtMjAxOS0xMzQ3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-version-1903-server-core-installation&cursor=WyIyMDE5LTEyLTEwVDIxOjQxOjA1LjAwMDAwMFoiLCJDVkUtMjAxOS0xNDgzIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-version-1903-server-core-installation/?cursor=WyIyMDE5LTEyLTEwVDIxOjQxOjA1LjAwMDAwMFoiLCJDVkUtMjAxOS0xNDgzIl0>. Everything for agents: <https://agentprime.io/llms.txt>.