Windows Server 20H2

26 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-34713 HIGH KEV PATCH THREAT This Week

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE Windows 10 1507 Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.8

EPSS

68.0%

CVE-2022-22047 HIGH KEV PATCH THREAT This Week

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.8

EPSS

18.8%

CVE-2022-26925 MEDIUM KEV PATCH THREAT This Month

Windows LSA Spoofing Vulnerability. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. This Missing Authentication for Critical Function vulnerability could allow attackers to access critical functionality without authentication.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +14

NVD

CVSS 3.1

5.9

EPSS

10.5%

CVE-2022-26904 HIGH POC KEV PATCH THREAT Act Now

Windows User Profile Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Race Condition Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 +15

NVD

CVSS 3.1

7.0

EPSS

9.8%

CVE-2022-24521 HIGH KEV PATCH THREAT This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Memory Corruption Microsoft Buffer Overflow Windows 10 1507 Windows 10 1607 +15

NVD

CVSS 3.1

7.8

EPSS

7.3%

CVE-2021-43226 HIGH KEV PATCH THREAT This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 Windows 10 1809 +16

NVD

CVSS 3.1

7.8

EPSS

3.1%

CVE-2021-42278 HIGH KEV PATCH THREAT This Week

Active Directory Domain Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

Information Disclosure Windows Server 2004 Windows Server 2008 Windows Server 2012 Windows Server 2016 +3

NVD

CVSS 3.1

7.5

EPSS

70.2%

CVE-2021-41379 MEDIUM KEV PATCH THREAT This Month

Windows Installer Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 Windows 10 1809 +15

NVD

CVSS 3.1

5.5

EPSS

20.1%

CVE-2021-41357 HIGH KEV PATCH THREAT This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Windows 10 2004 Windows 10 20H2 Windows 10 21H1 Windows 11 21H2 +3

NVD

CVSS 3.1

7.8

EPSS

2.0%

CVE-2021-40450 HIGH KEV PATCH THREAT This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Windows 10 1809 Windows 10 1909 Windows 10 2004 Windows 10 20H2 +6

NVD

CVSS 3.1

7.8

EPSS

2.0%

CVE-2021-40449 HIGH POC KEV PATCH THREAT Act Now

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Use After Free Memory Corruption Information Disclosure Windows 10 1507 Windows 10 1607 +17

NVD

CVSS 3.1

7.8

EPSS

73.4%

CVE-2021-36955 HIGH KEV PATCH THREAT This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 Windows 10 1809 +14

NVD

CVSS 3.1

7.8

EPSS

3.2%

CVE-2021-36948 HIGH KEV PATCH THREAT This Week

Windows Update Medic Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1809 Windows 10 1909 Windows 10 2004 +5

NVD

CVSS 3.1

7.8

EPSS

19.9%

CVE-2021-36942 HIGH POC KEV PATCH THREAT This Week

Windows LSA Spoofing Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Microsoft Information Disclosure Windows Server 2004 Windows Server 2008 Windows Server 2012 +3

NVD

CVSS 3.1

7.5

EPSS

66.0%

CVE-2021-34486 HIGH KEV PATCH THREAT This Week

Windows Event Tracing Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Use After Free Microsoft Memory Corruption Information Disclosure Windows 10 1809 +7

NVD

CVSS 3.1

7.8

EPSS

7.4%

CVE-2021-34484 HIGH KEV PATCH THREAT This Week

Windows User Profile Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.8

EPSS

14.4%

CVE-2021-33771 HIGH KEV PATCH THREAT This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 Windows 10 1809 +12

NVD

CVSS 3.1

7.8

EPSS

6.3%

CVE-2021-31979 HIGH KEV PATCH THREAT This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.8

EPSS

2.6%

CVE-2021-34527 HIGH POC KEV PATCH THREAT Act Now

<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Microsoft RCE Windows 10 1507 Windows 10 1607 Windows 10 1809 +14

NVD

CVSS 3.1

8.8

EPSS

99.8%

CVE-2021-33739 HIGH KEV PATCH THREAT This Week

Microsoft DWM Core Library Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 1909 Windows 10 2004 Windows 10 20H2 +3

NVD

CVSS 3.1

8.4

EPSS

6.6%

CVE-2021-31956 HIGH KEV PATCH THREAT This Week

Windows NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Integer Overflow Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +14

NVD

CVSS 3.1

7.8

EPSS

20.1%

CVE-2021-31955 MEDIUM KEV PATCH THREAT This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1809 Windows 10 1909 Windows 10 2004 +5

NVD

CVSS 3.1

5.5

EPSS

81.1%

CVE-2021-31201 MEDIUM KEV PATCH THREAT This Month

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.2), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

5.2

EPSS

2.6%

CVE-2021-31199 MEDIUM KEV PATCH THREAT This Month

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.2), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

5.2

EPSS

3.0%

CVE-2021-31166 CRITICAL POC KEV PATCH THREAT Act Now

HTTP Protocol Stack Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Use After Free RCE Memory Corruption Windows 10 2004 Windows 10 20H2 +2

NVD GitHub

CVSS 3.1

9.8

EPSS

99.7%

CVE-2021-28310 HIGH KEV PATCH THREAT This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Windows 10 1803 Windows 10 1809 Windows 10 1909 +6

NVD

CVSS 3.1

7.8

EPSS

8.3%

CVE-2022-34713

EPSS 68% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Microsoft RCE Windows 10 1507 +15

NVD

CVE-2022-22047

EPSS 19% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 +15

NVD

CVE-2022-26925

EPSS 10% CVSS 5.9

MEDIUM KEV PATCH THREAT This Month

Authentication Bypass Microsoft Windows 10 1507 +16

NVD

CVE-2022-26904

EPSS 10% CVSS 7.0

HIGH POC KEV PATCH THREAT Act Now

Windows User Profile Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Race Condition Microsoft Information Disclosure +17

NVD

CVE-2022-24521

EPSS 7% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Memory Corruption Microsoft Buffer Overflow +17

NVD

CVE-2021-43226

EPSS 3% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 +18

NVD

CVE-2021-42278

EPSS 70% CVSS 7.5

HIGH KEV PATCH THREAT This Week

Active Directory Domain Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

Information Disclosure Windows Server 2004 Windows Server 2008 +5

NVD

CVE-2021-41379

EPSS 20% CVSS 5.5

MEDIUM KEV PATCH THREAT This Month

Windows Installer Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 +17

NVD

CVE-2021-41357

EPSS 2% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Windows 10 2004 Windows 10 20H2 +5

NVD

CVE-2021-40450

EPSS 2% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Windows 10 1809 Windows 10 1909 +8

NVD

CVE-2021-40449

EPSS 73% CVSS 7.8

HIGH POC KEV PATCH THREAT Act Now

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Use After Free Memory Corruption Information Disclosure +19

NVD

CVE-2021-36955

EPSS 3% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Windows Common Log File System Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 +16

NVD

CVE-2021-36948

EPSS 20% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Windows Update Medic Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1809 +7

NVD

CVE-2021-36942

EPSS 66% CVSS 7.5

HIGH POC KEV PATCH THREAT This Week

Windows LSA Spoofing Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Microsoft Information Disclosure Windows Server 2004 +5

NVD

CVE-2021-34486

EPSS 7% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Use After Free Microsoft Memory Corruption +9

NVD

CVE-2021-34484

EPSS 14% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Windows User Profile Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 +15

NVD

CVE-2021-33771

EPSS 6% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 +14

NVD

CVE-2021-31979

EPSS 3% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Buffer Overflow Microsoft Windows 10 1507 +15

NVD

CVE-2021-34527

EPSS 100% CVSS 8.8

HIGH POC KEV PATCH THREAT Act Now

Microsoft RCE Windows 10 1507 +16

NVD

CVE-2021-33739

EPSS 7% CVSS 8.4

HIGH KEV PATCH THREAT This Week

Microsoft DWM Core Library Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity.

Microsoft Information Disclosure Windows 10 1909 +5

NVD

CVE-2021-31956

EPSS 20% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Windows NTFS Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Integer Overflow Information Disclosure Microsoft +16

NVD

CVE-2021-31955

EPSS 81% CVSS 5.5

MEDIUM KEV PATCH THREAT This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1809 +7

NVD

CVE-2021-31201

EPSS 3% CVSS 5.2

MEDIUM KEV PATCH THREAT This Month

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.2), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 +15

NVD

CVE-2021-31199

EPSS 3% CVSS 5.2

MEDIUM KEV PATCH THREAT This Month

Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability. Rated medium severity (CVSS 5.2), this vulnerability is low attack complexity.

Microsoft Information Disclosure Windows 10 1507 +15

NVD

CVE-2021-31166

EPSS 100% CVSS 9.8

CRITICAL POC KEV PATCH THREAT Act Now

Use After Free RCE Memory Corruption +4

NVD GitHub

CVE-2021-28310

EPSS 8% CVSS 7.8

HIGH KEV PATCH THREAT This Week

Buffer Overflow Memory Corruption Windows 10 1803 +8

NVD