Advisories · Technology

Microsoft Windows Server version 20H2.

Every CVE that names Microsoft Windows Server version 20H2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-23285 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23284 CVE record

CVSS 7.2 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23283 CVE record

CVSS 7.0 High

Windows ALPC Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23281 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-23253 CVE record

CVSS 6.5 Medium

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-22010 CVE record

CVSS 4.4 Medium

Media Foundation Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-21990 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Remote Desktop Client Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-21977 CVE record

CVSS 3.3 Low

Media Foundation Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-21975 CVE record

CVSS 4.7 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Mar 2022
CVE-2022-22718 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22717 CVE record

CVSS 7.0 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22715 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Named Pipe File System Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22712 CVE record

CVSS 5.6 Medium

Windows Hyper-V Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22710 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22002 CVE record

CVSS 5.5 Medium

Windows User Account Profile Picture Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22001 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-22000 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21999 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 9 Feb 2022
CVE-2022-21998 CVE record

CVSS 5.5 Medium

Windows Common Log File System Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21997 CVE record

CVSS 7.1 High

Windows Print Spooler Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21995 CVE record

CVSS 7.9 High

Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21994 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21993 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21992 CVE record

CVSS 7.8 High

Windows Mobile Device Management Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21989 CVE record

CVSS 7.8 High

Windows Kernel Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21985 CVE record

CVSS 5.5 Medium

Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21984 CVE record

CVSS 8.8 High

Windows DNS Server Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 21H1
Not analysed yet 9 Feb 2022
CVE-2022-21981 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21974 CVE record

CVSS 7.8 High

Roaming Security Rights Management Services Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 9 Feb 2022
CVE-2022-21971 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV

Windows Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Memory corruption
Not analysed yet 9 Feb 2022
CVE-2022-21963 CVE record

CVSS 6.4 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21962 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21961 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21960 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21959 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21958 CVE record

CVSS 6.8 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21928 CVE record

CVSS 6.3 Medium

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21924 CVE record

CVSS 5.3 Medium

Workstation Service Remote Protocol Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21922 CVE record

CVSS 8.8 High

Remote Procedure Call Runtime Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21921 CVE record

CVSS 4.4 Medium

Windows Defender Credential Guard Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 21H1
- Microsoft Windows Server 2022
Not analysed yet 11 Jan 2022
CVE-2022-21920 CVE record

CVSS 8.8 High

Windows Kerberos Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21919 CVE record

CVSS 7.0 HighCritical · KEVKEV

Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
- Path traversal
Not analysed yet 11 Jan 2022
CVE-2022-21918 CVE record

CVSS 6.5 Medium

DirectX Graphics Kernel File Denial of Service Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21916 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21915 CVE record

CVSS 6.5 Medium

Windows GDI+ Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21914 CVE record

CVSS 7.8 High

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21913 CVE record

CVSS 5.3 Medium

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21912 CVE record

CVSS 7.8 High

DirectX Graphics Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21910 CVE record

CVSS 7.8 High

Microsoft Cluster Port Driver Elevation of Privilege Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
Not analysed yet 11 Jan 2022
CVE-2022-21908 CVE record

CVSS 7.8 High

Windows Installer Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21907 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

HTTP Protocol Stack Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21906 CVE record

CVSS 5.5 Medium

Windows Defender Application Control Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21905 CVE record

CVSS 4.6 Medium

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21904 CVE record

CVSS 7.5 High

Windows GDI Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21902 CVE record

CVSS 7.8 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21901 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21900 CVE record

CVSS 4.6 Medium

Windows Hyper-V Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21898 CVE record

CVSS 7.8 High

DirectX Graphics Kernel Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21897 CVE record

CVSS 7.8 High

Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022
CVE-2022-21896 CVE record

CVSS 7.0 High

Windows DWM Core Library Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows Server 2019
Not analysed yet 11 Jan 2022