Advisories · Technology

Microsoft Windows Server, version 1909 (Server Core installation).

Every CVE that names Microsoft Windows Server, version 1909 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-28325 CVE record

CVSS 6.5 Medium

Windows SMB Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28323 CVE record

CVSS 6.5 Medium

Windows DNS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28322 CVE record

CVSS 7.8 High

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28321 CVE record

CVSS 7.8 High

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28320 CVE record

CVSS 7.8 High

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28319 CVE record

CVSS 7.5 High

Windows TCP/IP Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28318 CVE record

CVSS 5.5 Medium

Windows GDI+ Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28317 CVE record

CVSS 5.5 Medium

Microsoft Windows Codecs Library Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28316 CVE record

CVSS 4.2 Medium

Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28315 CVE record

CVSS 7.8 High

Windows Media Video Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28314 CVE record

CVSS 7.8 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Apr 2021
CVE-2021-28313 CVE record

CVSS 7.8 High

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28312 CVE record

CVSS 3.3 Low

Windows NTFS Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Apr 2021
CVE-2021-28311 CVE record

CVSS 6.5 Medium

Windows Application Compatibility Cache Denial of Service Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-28310 CVE record

CVSS 7.8 HighCritical · KEVKEV

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 13 Apr 2021
CVE-2021-28309 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27096 CVE record

CVSS 7.8 High

NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27095 CVE record

CVSS 7.8 High

Windows Media Video Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27094 CVE record

CVSS 4.4 Medium

Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27093 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27092 CVE record

CVSS 6.8 Medium

Azure AD Web Sign-in Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 13 Apr 2021
CVE-2021-27089 CVE record

CVSS 7.8 High

Microsoft Internet Messaging API Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27088 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27086 CVE record

CVSS 7.8 High

Windows Services and Controller App Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27079 CVE record

CVSS 5.7 Medium

Windows Media Photo Codec Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27072 CVE record

CVSS 7.0 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-26417 CVE record

CVSS 5.5 Medium

Windows Overlay Filter Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Apr 2021
CVE-2021-26416 CVE record

CVSS 7.7 High

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Apr 2021
CVE-2021-26415 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-26413 CVE record

CVSS 6.2 Medium

Windows Installer Spoofing Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 13 Apr 2021
CVE-2021-27063 CVE record

CVSS 7.5 High

Windows DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26900 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 2004
Not analysed yet 11 Mar 2021
CVE-2021-26897 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26896 CVE record

CVSS 7.5 High

Windows DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26895 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26894 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26893 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26892 CVE record

CVSS 6.2 Medium

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1803
Not analysed yet 11 Mar 2021
CVE-2021-26891 CVE record

CVSS 7.8 High

Windows Container Execution Agent Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 11 Mar 2021
CVE-2021-26890 CVE record

CVSS 7.8 High

Application Virtualization Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 11 Mar 2021
CVE-2021-26889 CVE record

CVSS 7.8 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 Mar 2021
CVE-2021-26886 CVE record

CVSS 6.1 Medium

User Profile Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26884 CVE record

CVSS 5.5 Medium

Windows Media Photo Codec Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26880 CVE record

CVSS 7.8 High

Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1803
Not analysed yet 11 Mar 2021
CVE-2021-26879 CVE record

CVSS 7.5 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26877 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 11 Mar 2021
CVE-2021-26876 CVE record

CVSS 8.8 High

OpenType Font Parsing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 Mar 2021
CVE-2021-26874 CVE record

CVSS 7.8 High

Windows Overlay Filter Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 11 Mar 2021
CVE-2021-26870 CVE record

CVSS 7.8 High

Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 Mar 2021
CVE-2021-26868 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26867 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 2004
Not analysed yet 11 Mar 2021
CVE-2021-26866 CVE record

CVSS 7.1 High

Windows Update Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 11 Mar 2021
CVE-2021-26865 CVE record

CVSS 8.8 High

Windows Container Execution Agent Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 11 Mar 2021
CVE-2021-26864 CVE record

CVSS 8.4 High

Windows Virtual Registry Provider Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 11 Mar 2021
CVE-2021-26863 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 Mar 2021
CVE-2021-26860 CVE record

CVSS 7.8 High

Windows App-V Overlay Filter Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 11 Mar 2021
CVE-2021-24095 CVE record

CVSS 7.0 High

DirectX Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 Mar 2021
CVE-2021-24090 CVE record

CVSS 7.8 High

Windows Error Reporting Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 2004
Not analysed yet 11 Mar 2021
CVE-2021-1729 CVE record

CVSS 7.1 High

Windows Update Stack Setup Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 Mar 2021
CVE-2021-25195 CVE record

CVSS 7.8 High

Windows PKU2U Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 25 Feb 2021