Advisories · Technology
Microsoft Windows Server.
Every CVE that names Microsoft Windows Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Data Sharing Service…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error Reporting Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows TCP/IP stack improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a…
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists when Windows Hyper-V Network Switch on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V…
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A security feature bypass exists when Windows Secure Boot improperly restricts access to…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows Graphics…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists when the Windows Jet Database Engine…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists in the way that the Windows Code Integrity…
- Microsoft Windows
- Microsoft Windows Server
-
A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows Error Reporting manager…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when umpo.dll of the Power Service…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows AppX Deployment Server that…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows Error Reporting manager…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A security feature bypass vulnerability exists in Microsoft Windows when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when Windows Update Client fails to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows kernel improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Windows redirected drive buffering…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in the Microsoft Windows Update Client…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows CloudStore improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when Windows improperly handles…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A spoofing vulnerability exists when Transport Layer Security (TLS) accesses non…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles hard links…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does…
- Microsoft Windows
- Microsoft Windows Server
- CVSS 7.8 HighCritical · KEVKEV · ransomware
Symlink following in Microsoft Windows and others
- Microsoft Windows
- Microsoft Windows Server
- Path traversal
-
A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Remote Code Execution Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker…
- Microsoft Windows
- Microsoft Windows Server
-
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka 'MS XML Remote Code Execution Vulnerability'.
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows AppX Deployment Server…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A security feature bypass exists when Windows Secure Boot improperly restricts access to…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure vulnerability exists in Windows when the Windows SMB Client…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A denial of service vulnerability exists when Windows improperly handles objects in…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in the Windows Remote Desktop Client when a…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists when the Windows Update Delivery…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory, aka 'Windows Network Connectivity Assistant Elevation of Privilege…
- Microsoft Windows Server
- Microsoft Windows
-
Microsoft Windows: An information disclosure vulnerability exists when the Windows GDI component improperly…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An elevation of privilege vulnerability exists in Windows when the Win32k component fails…
- Microsoft Windows
- Microsoft Windows Server
-
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: An information disclosure exists in the Windows Common Log File System (CLFS) driver when…
- Microsoft Windows
- Microsoft Windows Server
-
Microsoft Windows: A remote code execution vulnerability exists in Microsoft Windows that could allow remote…
- Microsoft Windows
- Microsoft Windows Server