Advisories · Technology
Microsoft Windows Server, version 1903 (Server Core installation).
Every CVE that names Microsoft Windows Server, version 1903 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows Code Integrity…
- Microsoft Windows
- Microsoft Windows Server
-
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows Error Reporting manager…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when umpo.dll of the Power Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows AppX Deployment Server that…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows Error Reporting manager…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when Windows Update Client fails to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Windows redirected drive buffering…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows CloudStore improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles hard links…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker…
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows AppX Deployment Server…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A security feature bypass exists when Windows Secure Boot improperly restricts access to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in Windows when the Windows SMB Client…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Update Delivery…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory, aka 'Windows Network Connectivity Assistant Elevation of Privilege…
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure exists in the Windows Common Log File System (CLFS) driver when…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in Microsoft Windows that could allow remote…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the unistore.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows Audio Service when a malformed…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vul…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles calls to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in hdAudio.sys which may lead to an out of band write…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows store installer where…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles calls to…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with local privileges, is vulnerable to symbolic link and hard link attacks, aka 'Micro…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server