# Microsoft Windows Server.

Every CVE that names Microsoft Windows Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Microsoft Windows: An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles…](https://agentprime.io/advisories/CVE-2019-1090.md)
  `CVE-2019-1090` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege exists in Windows Audio Service…](https://agentprime.io/advisories/CVE-2019-1088.md)
  `CVE-2019-1088` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege exists in Windows Audio Service…](https://agentprime.io/advisories/CVE-2019-1087.md)
  `CVE-2019-1087` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege exists in Windows Audio Service…](https://agentprime.io/advisories/CVE-2019-1086.md)
  `CVE-2019-1086` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles…](https://agentprime.io/advisories/CVE-2019-1085.md)
  `CVE-2019-1085` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL…](https://agentprime.io/advisories/CVE-2019-1082.md)
  `CVE-2019-1082` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows where certain…](https://agentprime.io/advisories/CVE-2019-1074.md)
  `CVE-2019-1074` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-1073.md)
  `CVE-2019-1073` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-1071.md)
  `CVE-2019-1071` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows kernel fails to properly…](https://agentprime.io/advisories/CVE-2019-1067.md)
  `CVE-2019-1067` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER)…](https://agentprime.io/advisories/CVE-2019-1037.md)
  `CVE-2019-1037` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF)…](https://agentprime.io/advisories/CVE-2019-1006.md)
  `CVE-2019-1006` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0999.md)
  `CVE-2019-0999` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses.](https://agentprime.io/advisories/CVE-2019-0975.md)
  `CVE-2019-0975` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Se…](https://agentprime.io/advisories/CVE-2019-0966.md)
  `CVE-2019-0966` · CVE record: Microsoft Windows Server and 3 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0880.md)
  `CVE-2019-0880` · CVE record: Microsoft Windows Server and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 15 Jul 2019
- [A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection…](https://agentprime.io/advisories/CVE-2019-0865.md)
  `CVE-2019-0865` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial of Service Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0811.md)
  `CVE-2019-0811` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows Server: A memory corruption vulnerability exists in the Windows Server DHCP service when an…](https://agentprime.io/advisories/CVE-2019-0785.md)
  `CVE-2019-0785` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · EPSS 0.50 · Not analysed yet · Published 15 Jul 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-0961.md)
  `CVE-2019-0961` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature…](https://agentprime.io/advisories/CVE-2019-0942.md)
  `CVE-2019-0942` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to…](https://agentprime.io/advisories/CVE-2019-0936.md)
  `CVE-2019-0936` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Storage Service improperly…](https://agentprime.io/advisories/CVE-2019-0931.md)
  `CVE-2019-0931` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…](https://agentprime.io/advisories/CVE-2019-0903.md)
  `CVE-2019-0903` · CVE record: Microsoft Windows and 4 more · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.22 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0902.md)
  `CVE-2019-0902` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0901.md)
  `CVE-2019-0901` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0900.md)
  `CVE-2019-0900` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0899.md)
  `CVE-2019-0899` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0898.md)
  `CVE-2019-0898` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0897.md)
  `CVE-2019-0897` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0896.md)
  `CVE-2019-0896` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0895.md)
  `CVE-2019-0895` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0894.md)
  `CVE-2019-0894` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0893.md)
  `CVE-2019-0893` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-0892.md)
  `CVE-2019-0892` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0891.md)
  `CVE-2019-0891` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0890.md)
  `CVE-2019-0890` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0889.md)
  `CVE-2019-0889` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.20 · Not analysed yet · Published 16 May 2019
- [An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hy…](https://agentprime.io/advisories/CVE-2019-0886.md)
  `CVE-2019-0886` · CVE record: Microsoft Windows Server and 3 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly…](https://agentprime.io/advisories/CVE-2019-0885.md)
  `CVE-2019-0885` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-0882.md)
  `CVE-2019-0882` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-0881.md)
  `CVE-2019-0881` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER)…](https://agentprime.io/advisories/CVE-2019-0863.md)
  `CVE-2019-0863` · CVE record: Microsoft Windows and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-0758.md)
  `CVE-2019-0758` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows when a…](https://agentprime.io/advisories/CVE-2019-0734.md)
  `CVE-2019-0734` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A security feature bypass vulnerability exists in Windows Defender Application Control…](https://agentprime.io/advisories/CVE-2019-0733.md)
  `CVE-2019-0733` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerabi…](https://agentprime.io/advisories/CVE-2019-0727.md)
  `CVE-2019-0727` · CVE record: Microsoft Microsoft Visual Studio and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows Server: A memory corruption vulnerability exists in the Windows Server DHCP service when…](https://agentprime.io/advisories/CVE-2019-0725.md)
  `CVE-2019-0725` · CVE record: Microsoft Windows Server and 1 more · No CVSS score · EPSS 0.28 · Not analysed yet · Published 16 May 2019
- [Use after free in Microsoft Windows and others](https://agentprime.io/advisories/CVE-2019-0708.md)
  `CVE-2019-0708` · CVE record: Microsoft Windows and 1 more · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 16 May 2019 · Tags: Memory corruption
- [An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vu…](https://agentprime.io/advisories/CVE-2019-0707.md)
  `CVE-2019-0707` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · Not analysed yet · Published 16 May 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0879.md)
  `CVE-2019-0879` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0877.md)
  `CVE-2019-0877` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-0859.md)
  `CVE-2019-0859` · CVE record: Microsoft Windows and 1 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists when Windows improperly handles objects in…](https://agentprime.io/advisories/CVE-2019-0856.md)
  `CVE-2019-0856` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…](https://agentprime.io/advisories/CVE-2019-0853.md)
  `CVE-2019-0853` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.30 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0851.md)
  `CVE-2019-0851` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-0849.md)
  `CVE-2019-0849` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-0848.md)
  `CVE-2019-0848` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0847.md)
  `CVE-2019-0847` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 9 Apr 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-0846.md)
  `CVE-2019-0846` · CVE record: Microsoft Windows and 1 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 9 Apr 2019

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server.md?cursor=WyIyMDE5LTA0LTA5VDIwOjE4OjMyLjAwMDAwMFoiLCJDVkUtMjAxOS0wODQ2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server&cursor=WyIyMDE5LTA3LTE1VDE4OjU2OjIxLjAwMDAwMFoiLCJDVkUtMjAxOS0xMDkxIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server/?cursor=WyIyMDE5LTA3LTE1VDE4OjU2OjIxLjAwMDAwMFoiLCJDVkUtMjAxOS0xMDkxIl0>. Everything for agents: <https://agentprime.io/llms.txt>.