# Microsoft Windows Server.

Every CVE that names Microsoft Windows Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Microsoft Windows: A remote code execution vulnerability exists when the IOleCvt interface renders ASP…](https://agentprime.io/advisories/CVE-2019-0845.md)
  `CVE-2019-0845` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.15 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0844.md)
  `CVE-2019-0844` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists in the way that the VBScript engine handles…](https://agentprime.io/advisories/CVE-2019-0842.md)
  `CVE-2019-0842` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.18 · Not analysed yet · Published 9 Apr 2019
- [Symlink following in Microsoft Windows and others](https://agentprime.io/advisories/CVE-2019-0841.md)
  `CVE-2019-0841` · CVE record: Microsoft Windows and 1 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.41 · Not analysed yet · Published 9 Apr 2019 · Tags: Path traversal
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0840.md)
  `CVE-2019-0840` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Terminal Services component…](https://agentprime.io/advisories/CVE-2019-0839.md)
  `CVE-2019-0839` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when Windows Task Scheduler improperly…](https://agentprime.io/advisories/CVE-2019-0838.md)
  `CVE-2019-0838` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0837.md)
  `CVE-2019-0837` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles calls to…](https://agentprime.io/advisories/CVE-2019-0836.md)
  `CVE-2019-0836` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0814.md)
  `CVE-2019-0814` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles calls to…](https://agentprime.io/advisories/CVE-2019-0805.md)
  `CVE-2019-0805` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-0803.md)
  `CVE-2019-0803` · CVE record: Microsoft Windows and 1 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.45 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-0802.md)
  `CVE-2019-0802` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles calls to…](https://agentprime.io/advisories/CVE-2019-0796.md)
  `CVE-2019-0796` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0795.md)
  `CVE-2019-0795` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.21 · Not analysed yet · Published 9 Apr 2019
- [A remote code execution vulnerability exists when OLE automation improperly handles objects in memory, aka 'OLE Automation Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0794.md)
  `CVE-2019-0794` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.15 · Not analysed yet · Published 9 Apr 2019
- [A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0793.md)
  `CVE-2019-0793` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.18 · Not analysed yet · Published 9 Apr 2019
- [A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0792.md)
  `CVE-2019-0792` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.18 · Not analysed yet · Published 9 Apr 2019
- [A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0791.md)
  `CVE-2019-0791` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.18 · Not analysed yet · Published 9 Apr 2019
- [A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0790.md)
  `CVE-2019-0790` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 9 Apr 2019
- [An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protoc…](https://agentprime.io/advisories/CVE-2019-0786.md)
  `CVE-2019-0786` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Client Server Run-Time…](https://agentprime.io/advisories/CVE-2019-0735.md)
  `CVE-2019-0735` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A security feature bypass vulnerability exists in Windows which could allow an attacker…](https://agentprime.io/advisories/CVE-2019-0732.md)
  `CVE-2019-0732` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles calls to…](https://agentprime.io/advisories/CVE-2019-0731.md)
  `CVE-2019-0731` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles calls to…](https://agentprime.io/advisories/CVE-2019-0730.md)
  `CVE-2019-0730` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [An information disclosure vulnerability exists when the Windows TCP/IP stack improperly handles fragmented IP packets, aka 'Windows TCP/IP Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0688.md)
  `CVE-2019-0688` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0685.md)
  `CVE-2019-0685` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel fails to properly…](https://agentprime.io/advisories/CVE-2019-0782.md)
  `CVE-2019-0782` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists in the way that the ActiveX Data objects…](https://agentprime.io/advisories/CVE-2019-0784.md)
  `CVE-2019-0784` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0797.md)
  `CVE-2019-0797` · CVE record: Microsoft Windows Server and 1 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-0808.md)
  `CVE-2019-0808` · CVE record: Microsoft Windows and 1 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.53 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows SMB Server…](https://agentprime.io/advisories/CVE-2019-0821.md)
  `CVE-2019-0821` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists in the way that the VBScript engine handles…](https://agentprime.io/advisories/CVE-2019-0772.md)
  `CVE-2019-0772` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.13 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-0774.md)
  `CVE-2019-0774` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0775.md)
  `CVE-2019-0775` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0776.md)
  `CVE-2019-0776` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0756.md)
  `CVE-2019-0756` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows Print Spooler does not…](https://agentprime.io/advisories/CVE-2019-0759.md)
  `CVE-2019-0759` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory, aka 'Comctl32 Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0765.md)
  `CVE-2019-0765` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 9 Apr 2019
- [An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations.](https://agentprime.io/advisories/CVE-2019-0766.md)
  `CVE-2019-0766` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly…](https://agentprime.io/advisories/CVE-2019-0767.md)
  `CVE-2019-0767` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A memory corruption vulnerability exists in the Windows DHCP client when an attacker…](https://agentprime.io/advisories/CVE-2019-0697.md)
  `CVE-2019-0697` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.33 · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: A memory corruption vulnerability exists in the Windows DHCP client when an attacker…](https://agentprime.io/advisories/CVE-2019-0698.md)
  `CVE-2019-0698` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.63 · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to…](https://agentprime.io/advisories/CVE-2019-0701.md)
  `CVE-2019-0701` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0702.md)
  `CVE-2019-0702` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows SMB Server…](https://agentprime.io/advisories/CVE-2019-0703.md)
  `CVE-2019-0703` · CVE record: Microsoft Windows and 1 more · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows SMB Server…](https://agentprime.io/advisories/CVE-2019-0704.md)
  `CVE-2019-0704` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: A memory corruption vulnerability exists in the Windows DHCP client when an attacker…](https://agentprime.io/advisories/CVE-2019-0726.md)
  `CVE-2019-0726` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.54 · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…](https://agentprime.io/advisories/CVE-2019-0754.md)
  `CVE-2019-0754` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0755.md)
  `CVE-2019-0755` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists due to an integer overflow in Windows…](https://agentprime.io/advisories/CVE-2019-0682.md)
  `CVE-2019-0682` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from…](https://agentprime.io/advisories/CVE-2019-0683.md)
  `CVE-2019-0683` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists due to an integer overflow in Windows…](https://agentprime.io/advisories/CVE-2019-0689.md)
  `CVE-2019-0689` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…](https://agentprime.io/advisories/CVE-2019-0690.md)
  `CVE-2019-0690` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists due to an integer overflow in Windows…](https://agentprime.io/advisories/CVE-2019-0692.md)
  `CVE-2019-0692` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists due to an integer overflow in Windows…](https://agentprime.io/advisories/CVE-2019-0693.md)
  `CVE-2019-0693` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists due to an integer overflow in Windows…](https://agentprime.io/advisories/CVE-2019-0694.md)
  `CVE-2019-0694` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to…](https://agentprime.io/advisories/CVE-2019-0695.md)
  `CVE-2019-0695` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0696.md)
  `CVE-2019-0696` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 8 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0617.md)
  `CVE-2019-0617` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 8 Apr 2019

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server.md?cursor=WyIyMDE5LTA0LTA4VDIyOjM4OjMwLjAwMDAwMFoiLCJDVkUtMjAxOS0wNjE3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server&cursor=WyIyMDE5LTA0LTA5VDIwOjE4OjMyLjAwMDAwMFoiLCJDVkUtMjAxOS0wODQ2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server/?cursor=WyIyMDE5LTA0LTA5VDIwOjE4OjMyLjAwMDAwMFoiLCJDVkUtMjAxOS0wODQ2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.