# Microsoft Windows Server.

Every CVE that names Microsoft Windows Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1380.md)
  `CVE-2019-1380` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…](https://agentprime.io/advisories/CVE-2019-1379.md)
  `CVE-2019-1379` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1374.md)
  `CVE-2019-1374` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly…](https://agentprime.io/advisories/CVE-2019-1324.md)
  `CVE-2019-1324` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…](https://agentprime.io/advisories/CVE-2019-1310.md)
  `CVE-2019-1310` · CVE record: Microsoft Windows and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…](https://agentprime.io/advisories/CVE-2019-1309.md)
  `CVE-2019-1309` · CVE record: Microsoft Windows and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a…](https://agentprime.io/advisories/CVE-2019-0721.md)
  `CVE-2019-0721` · CVE record: Microsoft Windows and 3 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 12 Nov 2019
- [A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V…](https://agentprime.io/advisories/CVE-2019-0719.md)
  `CVE-2019-0719` · CVE record: Microsoft Windows Server and 3 more · No CVSS score · EPSS 0.11 · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…](https://agentprime.io/advisories/CVE-2019-0712.md)
  `CVE-2019-0712` · CVE record: Microsoft Windows and 3 more · No CVSS score · Not analysed yet · Published 12 Nov 2019
- [Microsoft Windows: A security feature bypass exists when Windows Secure Boot improperly restricts access to…](https://agentprime.io/advisories/CVE-2019-1368.md)
  `CVE-2019-1368` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability…](https://agentprime.io/advisories/CVE-2019-1365.md)
  `CVE-2019-1365` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode…](https://agentprime.io/advisories/CVE-2019-1364.md)
  `CVE-2019-1364` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows Graphics…](https://agentprime.io/advisories/CVE-2019-1363.md)
  `CVE-2019-1363` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode…](https://agentprime.io/advisories/CVE-2019-1362.md)
  `CVE-2019-1362` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1361.md)
  `CVE-2019-1361` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-1359.md)
  `CVE-2019-1359` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…](https://agentprime.io/advisories/CVE-2019-1358.md)
  `CVE-2019-1358` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.76 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…](https://agentprime.io/advisories/CVE-2019-1347.md)
  `CVE-2019-1347` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.15 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…](https://agentprime.io/advisories/CVE-2019-1346.md)
  `CVE-2019-1346` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.11 · Not analysed yet · Published 10 Oct 2019
- [An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1345.md)
  `CVE-2019-1345` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows Code Integrity…](https://agentprime.io/advisories/CVE-2019-1344.md)
  `CVE-2019-1344` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1343.md)
  `CVE-2019-1343` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · EPSS 0.11 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows Error Reporting manager…](https://agentprime.io/advisories/CVE-2019-1342.md)
  `CVE-2019-1342` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when umpo.dll of the Power Service…](https://agentprime.io/advisories/CVE-2019-1341.md)
  `CVE-2019-1341` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows AppX Deployment Server that…](https://agentprime.io/advisories/CVE-2019-1340.md)
  `CVE-2019-1340` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows Error Reporting manager…](https://agentprime.io/advisories/CVE-2019-1339.md)
  `CVE-2019-1339` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A security feature bypass vulnerability exists in Microsoft Windows when a…](https://agentprime.io/advisories/CVE-2019-1338.md)
  `CVE-2019-1338` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An information disclosure vulnerability exists when Windows Update Client fails to…](https://agentprime.io/advisories/CVE-2019-1337.md)
  `CVE-2019-1337` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client…](https://agentprime.io/advisories/CVE-2019-1336.md)
  `CVE-2019-1336` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…](https://agentprime.io/advisories/CVE-2019-1334.md)
  `CVE-2019-1334` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…](https://agentprime.io/advisories/CVE-2019-1333.md)
  `CVE-2019-1333` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.16 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an…](https://agentprime.io/advisories/CVE-2019-1326.md)
  `CVE-2019-1326` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the Windows redirected drive buffering…](https://agentprime.io/advisories/CVE-2019-1325.md)
  `CVE-2019-1325` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client…](https://agentprime.io/advisories/CVE-2019-1323.md)
  `CVE-2019-1323` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles…](https://agentprime.io/advisories/CVE-2019-1322.md)
  `CVE-2019-1322` · CVE record: Microsoft Windows and 4 more · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.19 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows CloudStore improperly handles…](https://agentprime.io/advisories/CVE-2019-1321.md)
  `CVE-2019-1321` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles…](https://agentprime.io/advisories/CVE-2019-1320.md)
  `CVE-2019-1320` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER…](https://agentprime.io/advisories/CVE-2019-1319.md)
  `CVE-2019-1319` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non…](https://agentprime.io/advisories/CVE-2019-1318.md)
  `CVE-2019-1318` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles hard links…](https://agentprime.io/advisories/CVE-2019-1317.md)
  `CVE-2019-1317` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does…](https://agentprime.io/advisories/CVE-2019-1316.md)
  `CVE-2019-1316` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Symlink following in Microsoft Windows and others](https://agentprime.io/advisories/CVE-2019-1315.md)
  `CVE-2019-1315` · CVE record: Microsoft Windows and 4 more · CVSS 7.8 High · Critical (KEV) · In CISA KEV, ransomware · Not analysed yet · Published 10 Oct 2019 · Tags: Path traversal
- [A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1311.md)
  `CVE-2019-1311` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · EPSS 0.36 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on…](https://agentprime.io/advisories/CVE-2019-1230.md)
  `CVE-2019-1230` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker…](https://agentprime.io/advisories/CVE-2019-1166.md)
  `CVE-2019-1166` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.68 · Not analysed yet · Published 10 Oct 2019
- [A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1060.md)
  `CVE-2019-1060` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · EPSS 0.14 · Not analysed yet · Published 10 Oct 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows AppX Deployment Server…](https://agentprime.io/advisories/CVE-2019-1303.md)
  `CVE-2019-1303` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: A security feature bypass exists when Windows Secure Boot improperly restricts access to…](https://agentprime.io/advisories/CVE-2019-1294.md)
  `CVE-2019-1294` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: An information disclosure vulnerability exists in Windows when the Windows SMB Client…](https://agentprime.io/advisories/CVE-2019-1293.md)
  `CVE-2019-1293` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…](https://agentprime.io/advisories/CVE-2019-1292.md)
  `CVE-2019-1292` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…](https://agentprime.io/advisories/CVE-2019-1291.md)
  `CVE-2019-1291` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…](https://agentprime.io/advisories/CVE-2019-1290.md)
  `CVE-2019-1290` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.12 · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Update Delivery…](https://agentprime.io/advisories/CVE-2019-1289.md)
  `CVE-2019-1289` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory, aka 'Windows Network Connectivity Assistant Elevation of Privilege…](https://agentprime.io/advisories/CVE-2019-1287.md)
  `CVE-2019-1287` · CVE record: Microsoft Windows Server and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…](https://agentprime.io/advisories/CVE-2019-1286.md)
  `CVE-2019-1286` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…](https://agentprime.io/advisories/CVE-2019-1285.md)
  `CVE-2019-1285` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1284.md)
  `CVE-2019-1284` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.](https://agentprime.io/advisories/CVE-2019-1283.md)
  `CVE-2019-1283` · CVE record: Microsoft Windows and 1 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: An information disclosure exists in the Windows Common Log File System (CLFS) driver when…](https://agentprime.io/advisories/CVE-2019-1282.md)
  `CVE-2019-1282` · CVE record: Microsoft Windows and 4 more · No CVSS score · Not analysed yet · Published 11 Sept 2019
- [Microsoft Windows: A remote code execution vulnerability exists in Microsoft Windows that could allow remote…](https://agentprime.io/advisories/CVE-2019-1280.md)
  `CVE-2019-1280` · CVE record: Microsoft Windows and 4 more · No CVSS score · EPSS 0.19 · Not analysed yet · Published 11 Sept 2019

Newest: <https://agentprime.io/advisories/technology/microsoft-windows-server.md>
Older: <https://agentprime.io/advisories/technology/microsoft-windows-server.md?cursor=WyIyMDE5LTA5LTExVDIxOjI1OjAwLjAwMDAwMFoiLCJDVkUtMjAxOS0xMjgwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-windows-server&cursor=WyIyMDE5LTExLTEyVDE4OjUyOjUyLjAwMDAwMFoiLCJDVkUtMjAxOS0xMzgxIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-windows-server/?cursor=WyIyMDE5LTExLTEyVDE4OjUyOjUyLjAwMDAwMFoiLCJDVkUtMjAxOS0xMzgxIl0>. Everything for agents: <https://agentprime.io/llms.txt>.