Advisories · Technology
Microsoft Windows Server, version 1903 (Server Core installation).
Every CVE that names Microsoft Windows Server, version 1903 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 1909 for ARM64-based Systems
- Microsoft Windows 10 Version 1909 for 32-bit Systems
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.
- Microsoft Windows 10 Version 1909 for 32-bit Systems
- Microsoft Windows 10 Version 1909 for x64-based Systems
-
Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when Windows Hyper-V on a host operating…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.
- Microsoft Windows 10 Version 1909 for x64-based Systems
- Microsoft Windows Server, version 1909 (Server Core installation)
-
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
- Microsoft Windows Server, version 1909 (Server Core installation)
- Microsoft Windows 10 Version 1909 for ARM64-based Systems
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.
- Microsoft Windows 10 Version 1909 for ARM64-based Systems
- Microsoft Windows 10 Version 1909 for x64-based Systems
-
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, aka 'Windows Remote Desktop Pr…
- Microsoft Windows 10 Version 1909 for 32-bit Systems
- Microsoft Windows Server, version 1909 (Server Core installation)
-
Microsoft Windows: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Graphics Component…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Graphics Component…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Graphics Component…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Graphics Component…
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could ga…
- Microsoft Windows 10 Version 1903 for 32-bit Systems
- Microsoft Windows 10 Version 1903 for x64-based Systems
-
Microsoft Windows: A security feature bypass vulnerability exists when Windows Netlogon improperly handles a…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations, aka 'Windows Elevation of Privilege Vulnerability'.
- Microsoft Windows 10 Version 1903 for 32-bit Systems
- Microsoft Windows 10 Version 1903 for x64-based Systems
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information vulnerability exists when Windows Modules Installer Service improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists due to a race condition in Windows…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows Installer because of the way…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows Remote Procedure Call…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Improper privilege management in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Privilege escalation
-
Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Improper privilege management in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Privilege escalation
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
Microsoft Windows: A security feature bypass vulnerability exists where a NETLOGON message is able to obtain…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when ActiveX Installer service may allow access to files without proper authentication, aka 'Microsoft ActiveX Installer Service Elevation of Privilege…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations, aka 'Microsoft Windows Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a…
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V…
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A security feature bypass exists when Windows Secure Boot improperly restricts access to…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server