Advisories · Technology
Microsoft Windows Server.
Every CVE that names Microsoft Windows Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
Microsoft Windows: An elevation of privilege vulnerability exists in the way that the unistore.dll handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows Audio Service when a malformed…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel fails to properly…
- Microsoft Windows
- Microsoft Windows Server
-
A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize certain error messages, aka 'Active Directory Federation Services XSS Vul…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles calls to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege exists in hdAudio.sys which may lead to an out of band write…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows store installer where…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles calls to…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with local privileges, is vulnerable to symbolic link and hard link attacks, aka 'Micro…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF)…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Ele…
- Microsoft Visual Studio
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows Transaction Manager…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Improper privilege management in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Privilege escalation
- CVSS 7.8 HighCritical · KEVKEV
Buffer overflow in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Memory corruption
-
Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows Server and others
- Microsoft Windows Server
- Microsoft Windows
- Path traversal
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A security feature bypass vulnerability exists in Active Directory Federation Services (ADFS) which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an att…
- Microsoft Windows Server
- Microsoft Windows Server, version 1903 (Server Core installation)
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows RDP client improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the way that the Windows Graphics Device…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server