Advisories · Technology

Microsoft Windows Server, version 1909 (Server Core installation).

Every CVE that names Microsoft Windows Server, version 1909 (Server Core installation) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-24106 CVE record

CVSS 5.5 Medium

Windows DirectX Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-24103 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-24102 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-24098 CVE record

CVSS 5.5 Medium

Windows Console Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 2004
- Microsoft Windows Server version 2004
Not analysed yet 25 Feb 2021
CVE-2021-24093 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-24091 CVE record

CVSS 7.8 High

Windows Camera Codec Pack Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 25 Feb 2021
CVE-2021-24088 CVE record

CVSS 8.8 High

Windows Local Spooler Remote Code Execution Vulnerability
- Microsoft Windows Server version 20H2
- Microsoft Windows 10 Version 20H2
Not analysed yet 25 Feb 2021
CVE-2021-24084 CVE record

CVSS 5.5 Medium

Windows Mobile Device Management Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 25 Feb 2021
CVE-2021-24083 CVE record

CVSS 7.8 High

Windows Address Book Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-24082 CVE record

CVSS 4.3 Medium

Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-24081 CVE record

CVSS 7.8 High

Microsoft Windows Codecs Library Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 25 Feb 2021
CVE-2021-24080 CVE record

CVSS 6.5 Medium

Windows Trust Verification API Denial of Service Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 25 Feb 2021
CVE-2021-24079 CVE record

CVSS 5.5 Medium

Windows Backup Engine Information Disclosure Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 25 Feb 2021
CVE-2021-24078 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 25 Feb 2021
CVE-2021-24077 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 25 Feb 2021
CVE-2021-24076 CVE record

CVSS 5.5 Medium

Microsoft Windows VMSwitch Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-1734 CVE record

CVSS 7.5 High

Windows Remote Procedure Call Information Disclosure Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 25 Feb 2021
CVE-2021-1732 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
- Memory corruption
Not analysed yet 25 Feb 2021
CVE-2021-1731 CVE record

CVSS 5.5 Medium

PFX Encryption Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 25 Feb 2021
CVE-2021-1727 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-1722 CVE record

CVSS 8.1 High

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-1698 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 25 Feb 2021
CVE-2020-17162 CVE record

CVSS 8.8 High

Microsoft Windows Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 25 Feb 2021
CVE-2021-1710 CVE record

CVSS 7.8 High

Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1709 CVE record

CVSS 7.0 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1708 CVE record

CVSS 5.7 Medium

Windows GDI+ Information Disclosure Vulnerability
- Microsoft Windows 10 Version 2004
- Microsoft Windows Server version 2004
Not analysed yet 12 Jan 2021
CVE-2021-1706 CVE record

CVSS 7.3 High

Windows LUAFV Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 12 Jan 2021
CVE-2021-1704 CVE record

CVSS 7.3 High

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows Server version 20H2
- Microsoft Windows 10 Version 1803
Not analysed yet 12 Jan 2021
CVE-2021-1702 CVE record

CVSS 7.8 High

Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1701 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1700 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1699 CVE record

CVSS 5.5 Medium

Windows (modem.sys) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1697 CVE record

CVSS 7.8 High

Windows InstallService Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1696 CVE record

CVSS 5.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1695 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1694 CVE record

CVSS 7.5 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 12 Jan 2021
CVE-2021-1693 CVE record

CVSS 7.8 High

Windows CSC Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1692 CVE record

CVSS 7.7 High

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows Server version 20H2
- Microsoft Windows 10 Version 1803
Not analysed yet 12 Jan 2021
CVE-2021-1691 CVE record

CVSS 7.7 High

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows Server version 20H2
- Microsoft Windows 10 Version 1909
Not analysed yet 12 Jan 2021
CVE-2021-1689 CVE record

CVSS 7.8 High

Windows Multipoint Management Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1688 CVE record

CVSS 7.8 High

Windows CSC Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1685 CVE record

CVSS 7.3 High

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 12 Jan 2021
CVE-2021-1684 CVE record

CVSS 5.0 Medium

Windows Bluetooth Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1683 CVE record

CVSS 5.0 Medium

Windows Bluetooth Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1682 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1680 CVE record

CVSS 7.8 High

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1679 CVE record

CVSS 6.5 Medium

Windows CryptoAPI Denial of Service Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1678 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows Print Spooler Spoofing Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1676 CVE record

CVSS 5.5 Medium

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1674 CVE record

CVSS 8.8 High

Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1673 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1672 CVE record

CVSS 5.5 Medium

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1671 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1669 CVE record

CVSS 8.8 High

Windows Remote Desktop Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1668 CVE record

CVSS 7.8 High

Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1667 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1666 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1665 CVE record

CVSS 7.8 High

GDI+ Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1664 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021
CVE-2021-1662 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server version 20H2
Not analysed yet 12 Jan 2021