microsoft / windows_server_2019
1,452 known vulnerabilities in microsoft windows_server_2019.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2024-38240 | Medium | 1.5% | 8.1 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | |
| CVE-2024-21350 | Medium | 1.5% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2023-38184 | Medium | 1.5% | 7.5 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulne… | |
| CVE-2021-27077 | Medium | 1.4% | 7.8 | Windows Win32k Elevation of Privilege Vulnerability | |
| CVE-2024-38045 | Medium | 1.4% | 8.1 | Windows TCP/IP Remote Code Execution Vulnerability | |
| CVE-2023-21691 | Medium | 1.4% | 7.5 | Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclo… | |
| CVE-2026-20868 | Medium | 1.4% | 8.8 | Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) a… | |
| CVE-2023-36882 | Medium | 1.4% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2026-20846 | Medium | 1.4% | 7.5 | Buffer over-read in Windows GDI+ allows an unauthorized attacker to deny service… | |
| CVE-2024-21416 | Medium | 1.4% | 8.1 | Windows TCP/IP Remote Code Execution Vulnerability | |
| CVE-2024-21347 | Medium | 1.4% | 7.5 | Microsoft ODBC Driver Remote Code Execution Vulnerability | |
| CVE-2021-38639 | Medium | 1.4% | 7.8 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2021-36975 | Medium | 1.3% | 7.8 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2021-34516 | Medium | 1.3% | 7.8 | Win32k Elevation of Privilege Vulnerability | |
| CVE-2023-21684 | Medium | 1.3% | 8.8 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnera… | |
| CVE-2026-42985 | Medium | 1.3% | 8.8 | Use after free in Remote Desktop Client allows an unauthorized attacker to execu… | |
| CVE-2026-62878 | Medium | 1.3% | 9.8 | Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to ex… | |
| CVE-2026-50330 | Medium | 1.3% | 7.5 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac… | |
| CVE-2023-21685 | Medium | 1.2% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2026-32225 | Medium | 1.2% | 8.8 | Protection mechanism failure in Windows Shell allows an unauthorized attacker to… | |
| CVE-2026-20921 | Medium | 1.2% | 7.5 | Concurrent execution using shared resource with improper synchronization ('race … | |
| CVE-2023-21797 | Medium | 1.2% | 8.8 | Microsoft ODBC Driver Remote Code Execution Vulnerability | |
| CVE-2023-21798 | Medium | 1.2% | 8.8 | Microsoft ODBC Driver Remote Code Execution Vulnerability | |
| CVE-2023-21799 | Medium | 1.2% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2026-69881 | Medium | 1.2% | 7.5 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacke… | |
| CVE-2026-40378 | Medium | 1.2% | 7.5 | Memory allocation with excessive size value in Windows Local Security Authority … | |
| CVE-2026-49787 | Medium | 1.2% | 7.5 | Allocation of resources without limits or throttling in Windows HTTP.sys allows … | |
| CVE-2026-49788 | Medium | 1.2% | 7.5 | Allocation of resources without limits or throttling in HTTP/2 allows an unautho… | |
| CVE-2026-50304 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50355 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50368 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50411 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services (AD FS) allo… | |
| CVE-2026-50496 | Medium | 1.2% | 7.5 | Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized … | |
| CVE-2026-50647 | Medium | 1.2% | 7.5 | Loop with unreachable exit condition ('infinite loop') in Active Directory Feder… | |
| CVE-2026-50653 | Medium | 1.2% | 7.5 | Loop with unreachable exit condition ('infinite loop') in Azure Active Directory… | |
| CVE-2026-50695 | Medium | 1.2% | 7.5 | Stack-based buffer overflow in Active Directory Federation Services allows an un… | |
| CVE-2026-50696 | Medium | 1.2% | 7.5 | Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allow… | |
| CVE-2026-54119 | Medium | 1.2% | 7.5 | Loop with unreachable exit condition ('infinite loop') in Windows Active Directo… | |
| CVE-2026-70065 | Medium | 1.2% | 7.5 | Missing release of memory after effective lifetime in Windows DHCP Server allows… | |
| CVE-2026-77494 | Medium | 1.2% | 7.5 | Access of resource using incompatible type ('type confusion') in Windows DHCP Se… | |
| CVE-2026-49181 | Medium | 1.2% | 7.5 | Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthor… | |
| CVE-2024-38263 | Medium | 1.2% | 7.5 | Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability | |
| CVE-2021-26862 | Medium | 1.2% | 7.0 | Windows Installer Elevation of Privilege Vulnerability | |
| CVE-2022-41118 | Medium | 1.2% | 7.5 | Windows Scripting Languages Remote Code Execution Vulnerability | |
| CVE-2023-21686 | Medium | 1.2% | 8.8 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilit… | |
| CVE-2023-21808 | Medium | 1.1% | 7.8 | .NET and Visual Studio Remote Code Execution Vulnerability | |
| CVE-2021-26866 | Medium | 1.1% | 7.1 | Windows Update Service Elevation of Privilege Vulnerability | |
| CVE-2021-36963 | Medium | 1.1% | 7.8 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | |
| CVE-2020-1070 | Medium | 1.1% | 7.8 | An elevation of privilege vulnerability exists when the Windows Print Spooler se… | |
| CVE-2026-20856 | Medium | 1.1% | 8.1 | Improper input validation in Windows Server Update Service allows an unauthorize… |