Advisories · Technology

Microsoft Windows Server version 20H2.

Every CVE that names Microsoft Windows Server version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-34510 CVE record

CVSS 7.8 High

Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-34509 CVE record

CVSS 5.5 Medium

Storage Spaces Controller Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 14 Jul 2021
CVE-2021-34508 CVE record

CVSS 8.8 High

Windows Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-34499 CVE record

CVSS 6.5 Medium

Windows DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-34494 CVE record

CVSS 8.8 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-34493 CVE record

CVSS 6.7 Medium

Windows Partition Management Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34491 CVE record

CVSS 5.5 Medium

Win32k Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-34490 CVE record

CVSS 7.5 High

Windows TCP/IP Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-34489 CVE record

CVSS 7.8 High

DirectWrite Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-34488 CVE record

CVSS 7.8 High

Windows Console Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-33786 CVE record

CVSS 8.1 High

Windows LSA Security Feature Bypass Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33785 CVE record

CVSS 7.5 High

Windows AF_UNIX Socket Provider Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-33784 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-33781 CVE record

CVSS 8.1 High

Azure AD Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 14 Jul 2021
CVE-2021-33780 CVE record

CVSS 8.8 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33779 CVE record

CVSS 8.1 High

Windows AD FS Security Feature Bypass Vulnerability
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33774 CVE record

CVSS 7.0 High

Windows Event Tracing Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-33773 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33772 CVE record

CVSS 7.5 High

Windows TCP/IP Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 2004
- Microsoft Windows 10 Version 20H2
Not analysed yet 14 Jul 2021
CVE-2021-33771 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33764 CVE record

CVSS 5.9 Medium

Windows Key Distribution Center Information Disclosure Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33763 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33761 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
Not analysed yet 14 Jul 2021
CVE-2021-33760 CVE record

CVSS 5.5 Medium

Media Foundation Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 2004
Not analysed yet 14 Jul 2021
CVE-2021-33759 CVE record

CVSS 7.8 High

Windows Desktop Bridge Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 14 Jul 2021
CVE-2021-33755 CVE record

CVSS 6.3 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-33754 CVE record

CVSS 8.0 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33751 CVE record

CVSS 7.0 High

Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
Not analysed yet 14 Jul 2021
CVE-2021-33746 CVE record

CVSS 8.0 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33745 CVE record

CVSS 6.5 Medium

Windows DNS Server Denial of Service Vulnerability
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
Not analysed yet 14 Jul 2021
CVE-2021-33744 CVE record

CVSS 5.3 Medium

Windows Secure Kernel Mode Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-33743 CVE record

CVSS 7.8 High

Windows Projected File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-31961 CVE record

CVSS 6.1 Medium

Windows InstallService Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
Not analysed yet 14 Jul 2021
CVE-2021-33739 CVE record

CVSS 8.4 HighCritical · KEVKEV

Microsoft DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 8 Jun 2021
CVE-2021-31977 CVE record

CVSS 8.6 High

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31976 CVE record

CVSS 7.5 High

Server for NFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31975 CVE record

CVSS 7.5 High

Server for NFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31974 CVE record

CVSS 7.5 High

Server for NFS Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31973 CVE record

CVSS 7.8 High

Windows GPSVC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31972 CVE record

CVSS 5.5 Medium

Event Tracing for Windows Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31970 CVE record

CVSS 5.5 Medium

Windows TCP/IP Driver Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 8 Jun 2021
CVE-2021-31969 CVE record

CVSS 7.8 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31968 CVE record

CVSS 7.5 High

Windows Remote Desktop Services Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31962 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Kerberos AppContainer Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31960 CVE record

CVSS 5.5 Medium

Windows Bind Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows 10 Version 2004
Not analysed yet 8 Jun 2021
CVE-2021-31958 CVE record

CVSS 7.5 High

Windows NTLM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31956 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows NTFS Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 8 Jun 2021
CVE-2021-31955 CVE record

CVSS 5.5 MediumCritical · KEVKEV

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Information disclosure
Not analysed yet 8 Jun 2021
CVE-2021-31954 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 8 Jun 2021
CVE-2021-31952 CVE record

CVSS 7.8 High

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31951 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31201 CVE record

CVSS 5.2 MediumCritical · KEVKEV

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31199 CVE record

CVSS 5.2 MediumCritical · KEVKEV

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-1675 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Print Spooler Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 8 Jun 2021
CVE-2021-31208 CVE record

CVSS 7.8 High

Windows Container Manager Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 2004
- Microsoft Windows Server version 2004
Not analysed yet 11 May 2021
CVE-2021-31205 CVE record

CVSS 6.5 Medium

Windows SMB Client Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 2004
- Microsoft Windows Server version 2004
Not analysed yet 11 May 2021
CVE-2021-31194 CVE record

CVSS 8.8 High

OLE Automation Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 May 2021
CVE-2021-31193 CVE record

CVSS 7.8 High

Windows SSDP Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 May 2021
CVE-2021-31191 CVE record

CVSS 5.5 Medium

Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 May 2021
CVE-2021-31188 CVE record

CVSS 7.8 High

Windows Graphics Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1803
- Microsoft Windows 10 Version 1809
Not analysed yet 11 May 2021