Advisories · Technology

Microsoft Windows Server version 20H2.

Every CVE that names Microsoft Windows Server version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-30140 CVE record

CVSS 7.5 High

Windows iSCSI Discovery Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Jun 2022
CVE-2022-30139 CVE record

CVSS 7.5 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Jun 2022
CVE-2022-30132 CVE record

CVSS 7.8 High

Windows Container Manager Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Jun 2022
CVE-2022-30131 CVE record

CVSS 7.8 High

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 15 Jun 2022
CVE-2022-32230 CVE record

CVSS 7.5 High

SMBv3 FileNormalizedNameInformation NULL Pointer Dereference
- Microsoft Windows 10 Version 20H2
- Microsoft Windows Server Version 20H2
- Memory corruption
Not analysed yet 14 Jun 2022
CVE-2022-30190 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 1 Jun 2022
CVE-2022-30138 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 18 May 2022
CVE-2022-29151 CVE record

CVSS 7.0 High

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-29150 CVE record

CVSS 7.0 High

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-29142 CVE record

CVSS 7.0 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29141 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29140 CVE record

CVSS 5.5 Medium

Windows Print Spooler Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29139 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29138 CVE record

CVSS 7.0 High

Windows Clustered Shared Volume Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-29137 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29135 CVE record

CVSS 7.0 High

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-29134 CVE record

CVSS 6.5 Medium

Windows Clustered Shared Volume Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-29132 CVE record

CVSS 7.8 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29131 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29130 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29129 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29128 CVE record

CVSS 8.8 High

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29127 CVE record

CVSS 4.2 Medium

BitLocker Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29126 CVE record

CVSS 7.0 High

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29125 CVE record

CVSS 7.0 High

Windows Push Notifications Apps Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29123 CVE record

CVSS 6.5 Medium

Windows Clustered Shared Volume Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-29122 CVE record

CVSS 6.5 Medium

Windows Clustered Shared Volume Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-29121 CVE record

CVSS 6.5 Medium

Windows WLAN AutoConfig Service Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29120 CVE record

CVSS 6.5 Medium

Windows Clustered Shared Volume Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-29115 CVE record

CVSS 7.8 High

Windows Fax Service Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29114 CVE record

CVSS 5.5 Medium

Windows Print Spooler Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29113 CVE record

CVSS 7.8 High

Windows Digital Media Receiver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29112 CVE record

CVSS 6.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29106 CVE record

CVSS 7.0 High

Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-29105 CVE record

CVSS 7.8 High

Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29104 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29103 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-29102 CVE record

CVSS 5.5 Medium

Windows Failover Cluster Information Disclosure Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-26939 CVE record

CVSS 7.0 High

Storage Spaces Direct Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-26938 CVE record

CVSS 7.0 High

Storage Spaces Direct Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-26937 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Windows Network File System Remote Code Execution Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-26936 CVE record

CVSS 6.5 Medium

Windows Server Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26935 CVE record

CVSS 6.5 Medium

Windows WLAN AutoConfig Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26934 CVE record

CVSS 6.5 Medium

Windows Graphics Component Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26933 CVE record

CVSS 5.5 Medium

Windows NTFS Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26932 CVE record

CVSS 8.2 High

Storage Spaces Direct Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 10 May 2022
CVE-2022-26931 CVE record

CVSS 7.5 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26930 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26927 CVE record

CVSS 8.8 High

Windows Graphics Component Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-26926 CVE record

CVSS 7.8 High

Windows Address Book Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Broken access control
Not analysed yet 10 May 2022
CVE-2022-26925 CVE record

CVSS 8.1 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows LSA Spoofing Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Authentication bypass
Not analysed yet 10 May 2022
CVE-2022-26923 CVE record

CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Weak cryptography or TLS
Not analysed yet 10 May 2022
CVE-2022-26913 CVE record

CVSS 7.4 High

Windows Authentication Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-24466 CVE record

CVSS 4.1 Medium

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-23279 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 10 May 2022
CVE-2022-23270 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22713 CVE record

CVSS 5.6 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server version 20H2
Not analysed yet 10 May 2022
CVE-2022-22019 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22016 CVE record

CVSS 7.0 High

Windows PlayToManager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022
CVE-2022-22015 CVE record

CVSS 6.5 Medium

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 10 May 2022