Windows Server, version 1903 (Server Core installation)
1,055 known vulnerabilities.
1,055 results · Feed
-
Unscored —CVE-2019-1102 EPSS 11%
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles object…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerabil…
-
Unscored —
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'D…
-
Unscored —
An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows …
-
Unscored —
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerabil…
-
Unscored —CVE-2019-1096 Public exploit
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'W…
-
Unscored —
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerabil…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Micro…
-
Unscored —
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its …
-
Unscored —
An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory, aka 'Windows…
-
Unscored —
An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Err…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege…
-
Unscored —
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windo…
-
Unscored —
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka …
-
Unscored —CVE-2019-1006 Public exploit
An authentication bypass vulnerability exists in Windows Communication Foundation (WCF) and Windows Identity Foundation…
-
Unscored —
A security feature bypass vulnerability exists when Active Directory Federation Services (ADFS) improperly updates its …
-
Unscored —
A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An atta…
-
Unscored —
A denial of service vulnerability exists in Windows DNS Server when it fails to properly handle DNS queries, aka 'Windo…
-
High 7.8CVE-2019-0880 Exploited
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 …
KEV May 23, 2022 -
Unscored —
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from …
-
Unscored —
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted pa…
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view…
-
High 7.8
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install p…
KEV Mar 15, 2022 -
High 7.8
Task Scheduler Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, a…
KEV Mar 15, 2022 -
Medium 6.3
Windows Shell Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would…
-
Medium 4.7
Windows GDI Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are…
-
High 7.8
Windows Audio Service Elevation of Privilege Vulnerability
An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that cou…
-
Medium 5.3
Windows NTLM Tampering Vulnerability
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection. An attacker who successfully exploited this vulnerability could gain the ability to downg…
-
Medium 6.4
Comctl32 Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who success…
-
Medium 5.5
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vu…
-
High 7.0
Windows Kernel Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view…
-
High 7.8
Windows Audio Service Elevation of Privilege Vulnerability
An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that cou…
-
High 7.8
Windows Audio Service Elevation of Privilege Vulnerability
An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that cou…
-
High 7.8
Windows Audio Service Elevation of Privilege Vulnerability
An elevation of privilege exists in Windows Audio Service. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that cou…
-
Medium 6.5
Windows Denial of Service Vulnerability
A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log o…
-
Medium 4.7
Windows GDI Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are…
-
Medium 6.3CVE-2019-0986 Public exploit
Windows User Profile Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulner…