Advisories · Technology
Microsoft Windows Server, version 1903 (Server Core installation).
Every CVE that names Microsoft Windows Server, version 1903 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.6 High
Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CWE-20
- CVSS 5.8 Medium
Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 5.8 Medium
Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 5.8 Medium
Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows Server and others
- Microsoft Windows Server
- Microsoft Windows
- Path traversal
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an att…
- Microsoft Windows Server
- Microsoft Windows Server, version 1903 (Server Core installation)
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows RDP client improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in Windows Audio Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in Windows Audio Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in Windows Audio Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows where certain…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows kernel fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER)…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF)…
- Microsoft Windows
- Microsoft Windows Server
-
A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses.
- Microsoft Windows Server
- Microsoft Windows Server, version 1903 (Server Core installation)
-
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Se…
- Microsoft Windows Server
- Microsoft Windows
- CVSS 7.8 HighCritical · KEVKEV
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection…
- Microsoft Windows
- Microsoft Windows Server
-
A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial of Service Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows Server, version 1903 (Server Core installation)
-
Microsoft Windows Server: A memory corruption vulnerability exists in the Windows Server DHCP service when an…
- Microsoft Windows Server
- Microsoft Windows Server, version 1903 (Server Core installation)
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Task Scheduler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- Path traversal
- CVSS 7.8 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Windows Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- Path traversal
- CVSS 6.3 Medium
Windows Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 4.7 Medium
Windows GDI Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 6.4 Medium
Comctl32 Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.0 High
Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 5.3 Medium
Windows NTLM Tampering Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 8.5 HighCritical · CVSS 7+ and EPSS
Microsoft Windows Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.0 High
Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 4.7 Medium
Windows GDI Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Audio Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803
- CVSS 7.8 High
Windows Storage Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows Server, version 1803 (Server Core Installation)
- CVSS 6.3 Medium
Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1703
- Microsoft Windows 10 Version 1803