VendorsMicrosoftwindows_serverall versions
Vulnerabilities

Microsoft Windows Server

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

303CVEs
CVE-2022-21984
Windows DNS Server Remote Code Execution Vulnerability
Published 2022-02-09 · Modified
8.8EPSS 0.048
CVE-2022-26927
Windows Graphics Component Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
8.8EPSS 0.044
CVE-2021-42291
Active Directory Domain Services Elevation of Privilege Vulnerability
Published 2021-11-10 · Modified
8.8EPSS 0.042
CVE-2021-42282
Active Directory Domain Services Elevation of Privilege Vulnerability
Published 2021-11-10 · Modified
8.8EPSS 0.042
CVE-2021-36970
Windows Print Spooler Spoofing Vulnerability
Published 2021-10-13 · Modified
8.8EPSS 0.031
CVE-2022-29141
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
8.8EPSS 0.027
CVE-2022-22019
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
8.8EPSS 0.026
CVE-2022-24508
Win32 File Enumeration Remote Code Execution Vulnerability
Published 2022-03-09 · Modified
8.8EPSS 0.025
CVE-2022-29137
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
8.8EPSS 0.024
CVE-2022-22014
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
8.8EPSS 0.024
CVE-2022-22013
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
8.8EPSS 0.024
CVE-2022-29139
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
8.8EPSS 0.024
CVE-2022-23294
Windows Event Tracing Remote Code Execution Vulnerability
Published 2022-03-09 · Modified
8.8EPSS 0.023
CVE-2021-42283
NTFS Elevation of Privilege Vulnerability
Published 2021-11-10 · Modified
8.8EPSS 0.005
CVE-2022-21893
Remote Desktop Protocol Remote Code Execution Vulnerability
Published 2022-01-11 · Modified
8.5EPSS 0.079
CVE-2022-26932
Storage Spaces Direct Elevation of Privilege Vulnerability
Published 2022-05-10 · Modified
8.2EPSS 0.007
CVE-2022-21905
Windows Hyper-V Security Feature Bypass Vulnerability
Published 2022-01-11 · Modified
8.0EPSS 0.007
CVE-2021-40464
Windows Nearby Sharing Elevation of Privilege Vulnerability
Published 2021-10-13 · Modified
8.0EPSS 0.006
CVE-2022-21995
Windows Hyper-V Remote Code Execution Vulnerability
Published 2022-02-09 · Modified
7.9EPSS 0.010
CVE-2022-21993
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.436
CVE-2022-21881
Windows Kernel Elevation of Privilege Vulnerability
Published 2022-01-11 · Modified
7.8EPSS 0.242
CVE-2022-22715
Named Pipe File System Elevation of Privilege Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.135
CVE-2021-43883
Windows Installer Elevation of Privilege Vulnerability
Published 2021-12-15 · Modified
7.8EPSS 0.120
CVE-2022-29104
Windows Print Spooler Elevation of Privilege Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.118
CVE-2018-8335
A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Published 2018-09-13 · Modified
7.8EPSS 0.090
CVE-2022-23299
Windows PDEV Elevation of Privilege Vulnerability
Published 2022-03-09 · Modified
7.8EPSS 0.076
CVE-2022-22000
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.043
CVE-2022-21994
Windows DWM Core Library Elevation of Privilege Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.042
CVE-2018-8410
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
Published 2018-09-13 · Modified
7.81 PoCEPSS 0.040
CVE-2022-21880
Windows GDI+ Information Disclosure Vulnerability
Published 2022-01-11 · Modified
7.8EPSS 0.039
CVE-2022-24507
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Published 2022-03-09 · Modified
7.8EPSS 0.039
CVE-2021-43228
SymCrypt Denial of Service Vulnerability
Published 2021-12-15 · Modified
7.8EPSS 0.037
CVE-2021-43219
DirectX Graphics Kernel File Denial of Service Vulnerability
Published 2021-12-15 · Modified
7.8EPSS 0.037
CVE-2018-0877
The Desktop Bridge Virtual File System (VFS) in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how file paths are managed, aka "Windows Desktop Bridge VFS Elevation of Privilege Vulnerability".
Published 2018-03-14 · Modified
7.81 PoCEPSS 0.033
CVE-2022-21989
Windows Kernel Elevation of Privilege Vulnerability
Published 2022-02-09 · Modified
7.8EPSS 0.032
CVE-2022-29105
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.027
CVE-2022-26926
Windows Address Book Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.027
CVE-2021-40462
Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.025
CVE-2021-40465
Windows Text Shaping Remote Code Execution Vulnerability
Published 2021-10-13 · Modified
7.8EPSS 0.025
CVE-2022-29115
Windows Fax Service Remote Code Execution Vulnerability
Published 2022-05-10 · Modified
7.8EPSS 0.023
← Prev2 / 8Next →