# Microsoft Windows Server, version 1909 (Server Core installation).

Every CVE that names Microsoft Windows Server, version 1909 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Windows SMB Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-28325.md)
  `CVE-2021-28325` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 6.5 Medium · EPSS 0.64 · Not analysed yet · Published 13 Apr 2021
- [Windows DNS Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-28323.md)
  `CVE-2021-28323` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Apr 2021
- [Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-28322.md)
  `CVE-2021-28322` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-28321.md)
  `CVE-2021-28321` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-28320.md)
  `CVE-2021-28320` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows TCP/IP Driver Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-28319.md)
  `CVE-2021-28319` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Apr 2021
- [Windows GDI+ Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-28318.md)
  `CVE-2021-28318` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Apr 2021
- [Microsoft Windows Codecs Library Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-28317.md)
  `CVE-2021-28317` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Apr 2021
- [Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-28316.md)
  `CVE-2021-28316` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 4.2 Medium · Not analysed yet · Published 13 Apr 2021
- [Windows Media Video Decoder Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-28315.md)
  `CVE-2021-28315` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-28314.md)
  `CVE-2021-28314` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-28313.md)
  `CVE-2021-28313` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows NTFS Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-28312.md)
  `CVE-2021-28312` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 13 Apr 2021
- [Windows Application Compatibility Cache Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-28311.md)
  `CVE-2021-28311` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Apr 2021
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-28310.md)
  `CVE-2021-28310` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 13 Apr 2021 · Tags: Memory corruption
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-28309.md)
  `CVE-2021-28309` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Apr 2021
- [NTFS Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-27096.md)
  `CVE-2021-27096` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows Media Video Decoder Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-27095.md)
  `CVE-2021-27095` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-27094.md)
  `CVE-2021-27094` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 13 Apr 2021
- [Windows Kernel Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-27093.md)
  `CVE-2021-27093` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Apr 2021
- [Azure AD Web Sign-in Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-27092.md)
  `CVE-2021-27092` · CVE record: Microsoft Windows 10 Version 20H2 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 13 Apr 2021
- [Microsoft Internet Messaging API Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-27089.md)
  `CVE-2021-27089` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows Event Tracing Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-27088.md)
  `CVE-2021-27088` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows Services and Controller App Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-27086.md)
  `CVE-2021-27086` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows Media Photo Codec Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-27079.md)
  `CVE-2021-27079` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 5.7 Medium · Not analysed yet · Published 13 Apr 2021
- [Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-27072.md)
  `CVE-2021-27072` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Apr 2021
- [Windows Overlay Filter Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-26417.md)
  `CVE-2021-26417` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Apr 2021
- [Windows Hyper-V Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-26416.md)
  `CVE-2021-26416` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.7 High · Not analysed yet · Published 13 Apr 2021
- [Windows Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26415.md)
  `CVE-2021-26415` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Apr 2021
- [Windows Installer Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2021-26413.md)
  `CVE-2021-26413` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 13 Apr 2021
- [Windows DNS Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-27063.md)
  `CVE-2021-27063` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2021
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26900.md)
  `CVE-2021-26900` · CVE record: Microsoft Windows 10 Version 1909 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26897.md)
  `CVE-2021-26897` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.12 · Not analysed yet · Published 11 Mar 2021
- [Windows DNS Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-26896.md)
  `CVE-2021-26896` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2021
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26895.md)
  `CVE-2021-26895` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2021
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26894.md)
  `CVE-2021-26894` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2021
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26893.md)
  `CVE-2021-26893` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2021
- [Windows Extensible Firmware Interface Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2021-26892.md)
  `CVE-2021-26892` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 11 Mar 2021
- [Windows Container Execution Agent Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26891.md)
  `CVE-2021-26891` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [Application Virtualization Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26890.md)
  `CVE-2021-26890` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [Windows Update Stack Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26889.md)
  `CVE-2021-26889` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [User Profile Service Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-26886.md)
  `CVE-2021-26886` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 11 Mar 2021
- [Windows Media Photo Codec Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2021-26884.md)
  `CVE-2021-26884` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 11 Mar 2021
- [Windows Storage Spaces Controller Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26880.md)
  `CVE-2021-26880` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [Windows Network Address Translation (NAT) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2021-26879.md)
  `CVE-2021-26879` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Mar 2021
- [Windows DNS Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26877.md)
  `CVE-2021-26877` · CVE record: Microsoft Windows Server 2008 R2 Service Pack 1 and 4 more · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 11 Mar 2021
- [OpenType Font Parsing Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26876.md)
  `CVE-2021-26876` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2021
- [Windows Overlay Filter Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26874.md)
  `CVE-2021-26874` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [Windows Projected File System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26870.md)
  `CVE-2021-26870` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [Windows Graphics Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26868.md)
  `CVE-2021-26868` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2021-26867.md)
  `CVE-2021-26867` · CVE record: Microsoft Windows 10 Version 1909 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Mar 2021
- [Windows Update Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26866.md)
  `CVE-2021-26866` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.1 High · Not analysed yet · Published 11 Mar 2021
- [Windows Container Execution Agent Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26865.md)
  `CVE-2021-26865` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2021
- [Windows Virtual Registry Provider Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26864.md)
  `CVE-2021-26864` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.4 High · Not analysed yet · Published 11 Mar 2021
- [Windows Win32k Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26863.md)
  `CVE-2021-26863` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.12 · Not analysed yet · Published 11 Mar 2021
- [Windows App-V Overlay Filter Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-26860.md)
  `CVE-2021-26860` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [DirectX Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-24095.md)
  `CVE-2021-24095` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.0 High · Not analysed yet · Published 11 Mar 2021
- [Windows Error Reporting Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-24090.md)
  `CVE-2021-24090` · CVE record: Microsoft Windows 10 Version 1909 and 4 more · CVSS 7.8 High · Not analysed yet · Published 11 Mar 2021
- [Windows Update Stack Setup Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-1729.md)
  `CVE-2021-1729` · CVE record: Microsoft Windows 10 Version 1803 and 4 more · CVSS 7.1 High · Not analysed yet · Published 11 Mar 2021
- [Windows PKU2U Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2021-25195.md)
  `CVE-2021-25195` · CVE record: Microsoft Windows 10 Version 20H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Feb 2021

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server-version-1909-server-core-installation.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server-version-1909-server-core-installation.md?cursor=WyIyMDIxLTAyLTI1VDIzOjAxOjU5LjAwMDAwMFoiLCJDVkUtMjAyMS0yNTE5NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server-version-1909-server-core-installation&cursor=WyIyMDIxLTA0LTEzVDE5OjMyOjU5LjAwMDAwMFoiLCJDVkUtMjAyMS0yODMyNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server-version-1909-server-core-installation/?cursor=WyIyMDIxLTA0LTEzVDE5OjMyOjU5LjAwMDAwMFoiLCJDVkUtMjAyMS0yODMyNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.