Advisories · Technology

Microsoft Windows Server version 2004.

Every CVE that names Microsoft Windows Server version 2004 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-41331 CVE record

CVSS 7.8 High

Windows Media Audio Decoder Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-41330 CVE record

CVSS 7.8 High

Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40489 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40488 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40478 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40477 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40476 CVE record

CVSS 7.5 High

Windows AppContainer Elevation Of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40475 CVE record

CVSS 5.5 Medium

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40470 CVE record

CVSS 7.8 High

DirectX Graphics Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40469 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 13 Oct 2021
CVE-2021-40468 CVE record

CVSS 5.5 Medium

Windows Bind Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 13 Oct 2021
CVE-2021-40467 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40466 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40465 CVE record

CVSS 7.8 High

Windows Text Shaping Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40464 CVE record

CVSS 8.0 High

Windows Nearby Sharing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40463 CVE record

CVSS 7.7 High

Windows Network Address Translation (NAT) Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40462 CVE record

CVSS 7.8 High

Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40461 CVE record

CVSS 8.0 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40460 CVE record

CVSS 6.5 Medium

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40456 CVE record

CVSS 5.3 Medium

Windows AD FS Security Feature Bypass Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Broken access control
Not analysed yet 13 Oct 2021
CVE-2021-40455 CVE record

CVSS 5.5 Medium

Windows Installer Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40454 CVE record

CVSS 5.5 Medium

Rich Text Edit Control Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40450 CVE record

CVSS 7.8 HighCritical · KEVKEV

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-40449 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 13 Oct 2021
CVE-2021-40443 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-38663 CVE record

CVSS 5.5 Medium

Windows exFAT File System Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-38662 CVE record

CVSS 5.5 Medium

Windows Fast FAT File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-36970 CVE record

CVSS 8.8 High

Windows Print Spooler Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-36953 CVE record

CVSS 7.5 High

Windows TCP/IP Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-26442 CVE record

CVSS 7.0 High

Windows HTTP.sys Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-26441 CVE record

CVSS 7.8 High

Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 13 Oct 2021
CVE-2021-38637 CVE record

CVSS 5.5 Medium

Windows Storage Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 15 Sept 2021
CVE-2021-38634 CVE record

CVSS 7.1 High

Microsoft Windows Update Client Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38632 CVE record

CVSS 5.7 Medium

Windows BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 15 Sept 2021
CVE-2021-38630 CVE record

CVSS 7.8 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-38624 CVE record

CVSS 6.5 Medium

Windows Key Storage Provider Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 15 Sept 2021
CVE-2021-36975 CVE record

CVSS 7.8 High

Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 15 Sept 2021
CVE-2021-36974 CVE record

CVSS 7.8 High

Windows SMB Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36973 CVE record

CVSS 7.8 High

Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36972 CVE record

CVSS 5.5 Medium

Windows SMB Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36967 CVE record

CVSS 8.0 High

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 15 Sept 2021
CVE-2021-36966 CVE record

CVSS 7.8 High

Windows Subsystem for Linux Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 15 Sept 2021
CVE-2021-36954 CVE record

CVSS 8.8 High

Windows Bind Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 15 Sept 2021
CVE-2021-36948 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Update Medic Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 12 Aug 2021
CVE-2021-36942 CVE record

CVSS 7.5 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows LSA Spoofing Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 12 Aug 2021
CVE-2021-36933 CVE record

CVSS 7.5 High

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-36932 CVE record

CVSS 7.5 High

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-36926 CVE record

CVSS 7.5 High

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-34537 CVE record

CVSS 7.8 High

Windows Bluetooth Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-34536 CVE record

CVSS 7.8 High

Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Memory corruption
Not analysed yet 12 Aug 2021
CVE-2021-34530 CVE record

CVSS 7.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-34487 CVE record

CVSS 7.0 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Privilege escalation
Not analysed yet 12 Aug 2021
CVE-2021-34486 CVE record

CVSS 7.8 HighCritical · KEVKEV

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
- Memory corruption
Not analysed yet 12 Aug 2021
CVE-2021-26433 CVE record

CVSS 7.5 High

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-26432 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-26431 CVE record

CVSS 7.8 High

Windows Recovery Environment Agent Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 2004
- Microsoft Windows 10 Version 20H2
Not analysed yet 12 Aug 2021
CVE-2021-26426 CVE record

CVSS 7.0 High

Windows User Account Profile Picture Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 12 Aug 2021
CVE-2021-34462 CVE record

CVSS 7.0 High

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 16 Jul 2021
CVE-2021-34461 CVE record

CVSS 7.8 High

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 2004
- Microsoft Windows 10 Version 20H2
Not analysed yet 16 Jul 2021
CVE-2021-34460 CVE record

CVSS 7.8 High

Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 16 Jul 2021