Advisories · Technology

Microsoft Windows Server version 20H2.

Every CVE that names Microsoft Windows Server version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-24545 CVE record

CVSS 8.1 High

Windows Kerberos Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24544 CVE record

CVSS 7.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24542 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24541 CVE record

CVSS 8.8 High

Windows Server Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24540 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Race condition
Not analysed yet 15 Apr 2022
CVE-2022-24539 CVE record

CVSS 8.1 High

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 15 Apr 2022
CVE-2022-24538 CVE record

CVSS 6.5 Medium

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 15 Apr 2022
CVE-2022-24537 CVE record

CVSS 7.8 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24536 CVE record

CVSS 7.2 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 15 Apr 2022
CVE-2022-24534 CVE record

CVSS 7.5 High

Win32 Stream Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24533 CVE record

CVSS 8.0 High

Remote Desktop Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24530 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24528 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24521 CVE record

CVSS 7.8 HighCritical · KEVKEV · ransomware

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 15 Apr 2022
CVE-2022-24500 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Windows SMB Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24499 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24498 CVE record

CVSS 6.5 Medium

Windows iSCSI Target Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24497 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Network File System Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24496 CVE record

CVSS 7.8 High

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24495 CVE record

CVSS 7.0 High

Windows Direct Show Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24494 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24493 CVE record

CVSS 5.5 Medium

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24492 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24491 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Network File System Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24490 CVE record

CVSS 8.1 High

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 15 Apr 2022
CVE-2022-24489 CVE record

CVSS 7.8 High

Cluster Client Failover (CCF) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 15 Apr 2022
CVE-2022-24488 CVE record

CVSS 7.8 High

Windows Desktop Bridge Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 15 Apr 2022
CVE-2022-24487 CVE record

CVSS 8.8 High

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24486 CVE record

CVSS 7.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24485 CVE record

CVSS 7.5 High

Win32 File Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24484 CVE record

CVSS 5.5 Medium

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 15 Apr 2022
CVE-2022-24483 CVE record

CVSS 5.5 Medium

Windows Kernel Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24482 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24481 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24479 CVE record

CVSS 7.8 High

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24474 CVE record

CVSS 7.8 High

Windows Win32k Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-23257 CVE record

CVSS 8.8 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 10 Version 21H1
Not analysed yet 15 Apr 2022
CVE-2022-22009 CVE record

CVSS 7.8 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 15 Apr 2022
CVE-2022-22008 CVE record

CVSS 7.8 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-21983 CVE record

CVSS 7.5 High

Win32 Stream Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Apr 2022
CVE-2022-24525 CVE record

CVSS 7.0 High

Windows Update Stack Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 9 Mar 2022
CVE-2022-24508 CVE record

CVSS 8.8 High

Win32 File Enumeration Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 9 Mar 2022
CVE-2022-24507 CVE record

CVSS 7.8 High

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24505 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24503 CVE record

CVSS 5.4 Medium

Remote Desktop Protocol Client Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24502 CVE record

CVSS 4.3 Medium

Windows HTML Platforms Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24460 CVE record

CVSS 7.0 High

Tablet Windows User Interface Application Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24459 CVE record

CVSS 7.8 High

Windows Fax and Scan Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-24454 CVE record

CVSS 7.8 High

Windows Security Support Provider Interface Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23299 CVE record

CVSS 7.8 High

Windows PDEV Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23298 CVE record

CVSS 7.0 High

Windows NT OS Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23297 CVE record

CVSS 5.5 Medium

Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23296 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23294 CVE record

CVSS 8.8 High

Windows Event Tracing Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23293 CVE record

CVSS 7.8 High

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23291 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23290 CVE record

CVSS 7.8 High

Windows Inking COM Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23288 CVE record

CVSS 7.0 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23287 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23286 CVE record

CVSS 7.0 High

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022