VendorsMicrosoftwindows_server_2019any version

Vulnerabilities

Microsoft Windows Server 2019 any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5825CVEs

CVE-2023-36594

Windows Graphics Component Elevation of Privilege Vulnerability

Published 2023-10-10 · Modified

7.8EPSS 0.116

CVE-2019-1253

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.

Published 2019-09-11 · Analyzed

7.8KEV1 PoCEPSS 0.116

CVE-2024-21310

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Published 2024-01-09 · Modified

7.8EPSS 0.115

CVE-2019-1159

Windows Kernel Elevation of Privilege Vulnerability

Published 2019-08-14 · Modified

7.8EPSS 0.113

CVE-2022-35756

Windows Kerberos Elevation of Privilege Vulnerability

Published 2023-05-31 · Modified

7.8EPSS 0.113

CVE-2023-23376

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Published 2023-02-14 · Analyzed

7.8KEVEPSS 0.109

CVE-2023-36900

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Published 2023-08-08 · Modified

7.8EPSS 0.106

CVE-2022-34729

Windows GDI Elevation of Privilege Vulnerability

Published 2022-09-13 · Modified

7.8EPSS 0.105

CVE-2024-38054

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

Published 2024-07-09 · Modified

7.8EPSS 0.104

CVE-2021-33771

Windows Kernel Elevation of Privilege Vulnerability

Published 2021-07-14 · Analyzed

7.8KEVEPSS 0.102

CVE-2023-32046

Windows MSHTML Platform Elevation of Privilege Vulnerability

Published 2023-07-11 · Analyzed

7.8KEVEPSS 0.100

CVE-2023-35359

Windows Kernel Elevation of Privilege Vulnerability

Published 2023-08-08 · Modified

7.8EPSS 0.099

CVE-2019-0879

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0846, CVE-2019-0847, CVE-2019-0851, CVE-2019-0877.

Published 2019-04-09 · Modified

7.8EPSS 0.098

CVE-2022-37970

Windows DWM Core Library Elevation of Privilege Vulnerability

Published 2022-10-11 · Modified

7.8EPSS 0.098

CVE-2024-30087

Win32k Elevation of Privilege Vulnerability

Published 2024-06-11 · Modified

7.8EPSS 0.095

CVE-2024-26229

Windows CSC Service Elevation of Privilege Vulnerability

Published 2024-04-09 · Analyzed

7.8EPSS 0.094

CVE-2022-37989

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Published 2022-10-11 · Modified

7.8EPSS 0.093

CVE-2021-34486

Windows Event Tracing Elevation of Privilege Vulnerability

Published 2021-08-12 · Analyzed

7.8KEVEPSS 0.093

CVE-2021-31959

Scripting Engine Memory Corruption Vulnerability

Published 2021-06-08 · Modified

7.8EPSS 0.092

CVE-2022-24542

Windows Win32k Elevation of Privilege Vulnerability

Published 2022-04-15 · Modified

7.8EPSS 0.092

CVE-2022-37987

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

Published 2022-10-11 · Modified

7.8EPSS 0.091

CVE-2019-1484

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

Published 2019-12-10 · Modified

7.8EPSS 0.089

CVE-2022-41113

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Published 2022-11-09 · Modified

7.8EPSS 0.088

CVE-2024-20698

Windows Kernel Elevation of Privilege Vulnerability

Published 2024-01-09 · Modified

7.8EPSS 0.086

CVE-2019-1388

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevation of Privilege Vulnerability'.

Published 2019-11-12 · Analyzed

7.8KEVEPSS 0.086

CVE-2026-20860

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Published 2026-01-13 · Analyzed

7.8EPSS 0.084

CVE-2021-28310

Win32k Elevation of Privilege Vulnerability

Published 2021-04-13 · Analyzed

7.8KEVEPSS 0.083

CVE-2022-44683

Windows Kernel Elevation of Privilege Vulnerability

Published 2022-12-13 · Modified

7.8EPSS 0.082

CVE-2022-41109

Windows Win32k Elevation of Privilege Vulnerability

Published 2022-11-09 · Modified

7.8EPSS 0.081

CVE-2024-30089

Microsoft Streaming Service Elevation of Privilege Vulnerability

Published 2024-06-11 · Modified

7.8EPSS 0.081

CVE-2024-21437

Windows Graphics Component Elevation of Privilege Vulnerability

Published 2024-03-12 · Analyzed

7.8EPSS 0.080

CVE-2023-23410

Windows HTTP.sys Elevation of Privilege Vulnerability

Published 2023-03-14 · Modified

7.8EPSS 0.080

CVE-2023-36731

Win32k Elevation of Privilege Vulnerability

Published 2023-10-10 · Modified

7.8EPSS 0.078

CVE-2022-23299

Windows PDEV Elevation of Privilege Vulnerability

Published 2022-03-09 · Modified

7.8EPSS 0.076

CVE-2020-0683

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.

Published 2020-02-11 · Analyzed

7.8KEV1 PoCEPSS 0.076

CVE-2023-23416

Windows Cryptographic Services Remote Code Execution Vulnerability

Published 2023-03-14 · Modified

7.8EPSS 0.076

CVE-2022-32230

SMBv3 FileNormalizedNameInformation NULL Pointer Dereference

Published 2022-06-14 · Modified

7.8EPSS 0.075

CVE-2022-38051

Windows Graphics Component Elevation of Privilege Vulnerability