Advisories · Technology
Microsoft Windows Server.
Every CVE that names Microsoft Windows Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in Windows Audio Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in Windows Audio Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in Windows Audio Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows where certain…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows kernel fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER)…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An authentication bypass vulnerability exists in Windows Communication Foundation (WCF)…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its list of banned IP addresses.
- Microsoft Windows Server
- Microsoft Windows Server, version 1903 (Server Core installation)
-
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka 'Windows Hyper-V Denial of Se…
- Microsoft Windows Server
- Microsoft Windows
- CVSS 7.8 HighCritical · KEVKEV
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection…
- Microsoft Windows
- Microsoft Windows Server
-
A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windows DNS Server Denial of Service Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows Server, version 1903 (Server Core installation)
-
Microsoft Windows Server: A memory corruption vulnerability exists in the Windows Server DHCP service when an…
- Microsoft Windows Server
- Microsoft Windows Server, version 1903 (Server Core installation)
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Storage Service improperly…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 8.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hy…
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV
Microsoft Windows: An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER)…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A security feature bypass vulnerability exists in Windows Defender Application Control…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerabi…
- Microsoft Visual Studio
- Microsoft Windows
-
Microsoft Windows Server: A memory corruption vulnerability exists in the Windows Server DHCP service when…
- Microsoft Windows Server
- Microsoft Windows Server, version 1903 (Server Core installation)
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Use after free in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Memory corruption
-
An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vu…
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server