Microsoft Vulnerabilities and Affected Products
Vulnerabilities associated with Windows Server, version 1909 (Server Core installation).
Products
Clear product- Windows Server 20194,131 vulnerabilities
- Windows Server 2019 (Server Core installation)4,034 vulnerabilities
- Windows 10 Version 18093,762 vulnerabilities
- Windows Server 20163,677 vulnerabilities
- Windows Server 20223,485 vulnerabilities
- Windows Server 2016 (Server Core installation)3,473 vulnerabilities
- Windows 10 Version 16073,184 vulnerabilities
- Windows 10 Version 21H23,063 vulnerabilities
- Windows Server 2012 R22,998 vulnerabilities
- Windows Server 2012 R2 (Server Core installation)2,853 vulnerabilities
- Windows Server 20122,824 vulnerabilities
- Windows Server 2012 (Server Core installation)2,691 vulnerabilities
- Windows 10 Version 22H22,565 vulnerabilities
- Windows 10 Version 15072,277 vulnerabilities
- Windows 11 Version 24H21,924 vulnerabilities
- Windows Server 20251,917 vulnerabilities
- Windows Server 2025 (Server Core installation)1,917 vulnerabilities
- Windows Server 2008 R2 Service Pack 11,874 vulnerabilities
- Windows Server 2008 R2 Service Pack 1 (Server Core installation)1,860 vulnerabilities
- Windows 11 Version 23H21,845 vulnerabilities
- Windows 11 version 22H21,776 vulnerabilities
- Windows Server 2022, 23H2 Edition (Server Core installation)1,725 vulnerabilities
- Windows Server 2008 Service Pack 2 (Server Core installation)1,667 vulnerabilities
- Windows Server 2008 Service Pack 21,664 vulnerabilities
- Windows 11 version 21H21,560 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-33760MEDIUM | Media Foundation Information Disclosure VulnerabilityMedia Foundation Information Disclosure Vulnerability Jul 14, 2021 | CVSS5.5v3.1 | EPSS0.974% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-31194HIGH | OLE Automation Remote Code Execution VulnerabilityOLE Automation Remote Code Execution Vulnerability May 11, 2021 | CVSS8.8v3.1 | EPSS2.35% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-31193HIGH | Windows SSDP Service Elevation of Privilege VulnerabilityWindows SSDP Service Elevation of Privilege Vulnerability CWE-269May 11, 2021 | CVSS7.8v3.1 | EPSS0.524% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-31191MEDIUM | Windows Projected File System FS Filter Driver Information Disclosure VulnerabilityWindows Projected File System FS Filter Driver Information Disclosure Vulnerability CWE-200May 11, 2021 | CVSS5.5v3.1 | EPSS0.76% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-31188HIGH | Windows Graphics Component Elevation of Privilege VulnerabilityWindows Graphics Component Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31170. | CVSS7.8v3.1 | EPSS1.37% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-31186HIGH | Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability CWE-200May 11, 2021 | CVSS7.4v3.1 | EPSS2.97% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-31184MEDIUM | Microsoft Windows Infrared Data Association (IrDA) Information Disclosure VulnerabilityMicrosoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability CWE-200May 11, 2021 | CVSS5.5v3.1 | EPSS1.56% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-31182HIGH | Microsoft Bluetooth Driver Spoofing VulnerabilityMicrosoft Bluetooth Driver Spoofing Vulnerability May 11, 2021 | CVSS7.1v3.1 | EPSS0.835% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-31170HIGH | Windows Graphics Component Elevation of Privilege VulnerabilityWindows Graphics Component Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31188. | CVSS7.8v3.1 | EPSS1.01% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-31167HIGH | Windows Container Manager Service Elevation of Privilege VulnerabilityWindows Container Manager Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31165, CVE-2021-31168, CVE-2021-31169, CVE-2021-31208. | CVSS7.8v3.1 | EPSS1.01% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28479MEDIUM | Windows CSC Service Information Disclosure VulnerabilityWindows CSC Service Information Disclosure Vulnerability CWE-200May 11, 2021 | CVSS5.5v3.1 | EPSS0.76% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28476CRITICAL | Windows Hyper-V Remote Code Execution VulnerabilityHyper-V Remote Code Execution Vulnerability May 11, 2021 | CVSS9.9v3.1 | EPSS38.6% | PoCs5 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28455HIGH | Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution VulnerabilityMicrosoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability CWE-77May 11, 2021 | CVSS8.8v3.1 | EPSS2.12% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28447MEDIUM | Windows Early Launch Antimalware Driver Security Feature Bypass VulnerabilityWindows Early Launch Antimalware Driver Security Feature Bypass Vulnerability This CVE ID is unique from CVE-2021-27094. Apr 13, 2021 | CVSS4.4v3.1 | EPSS2.04% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28446HIGH | Windows Portmapping Information Disclosure VulnerabilityWindows Portmapping Information Disclosure Vulnerability Apr 13, 2021 | CVSS7.1v3.1 | EPSS0.76% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28444MEDIUM | Windows Hyper-V Security Feature Bypass VulnerabilityWindows Hyper-V Security Feature Bypass Vulnerability Apr 13, 2021 | CVSS5.7v3.1 | EPSS1.75% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28445HIGH | Windows Network File System Remote Code Execution VulnerabilityWindows Network File System Remote Code Execution Vulnerability Apr 13, 2021 | CVSS8.1v3.1 | EPSS2.71% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28443MEDIUM | Windows Console Driver Denial of Service VulnerabilityWindows Console Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-28438. Apr 13, 2021 | CVSS5.5v3.1 | EPSS0.648% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28441MEDIUM | Windows Hyper-V Information Disclosure VulnerabilityWindows Hyper-V Information Disclosure Vulnerability Apr 13, 2021 | CVSS6.5v3.1 | EPSS0.76% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28442MEDIUM | Windows TCP/IP Information Disclosure VulnerabilityWindows TCP/IP Information Disclosure Vulnerability Apr 13, 2021 | CVSS6.5v3.1 | EPSS6.49% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28440HIGH | Windows Installer Elevation of Privilege VulnerabilityWindows Installer Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26415. CWE-269Apr 13, 2021 | CVSS7.0v3.1 | EPSS0.616% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28438MEDIUM | Windows Console Driver Denial of Service VulnerabilityWindows Console Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-28443. Apr 13, 2021 | CVSS5.5v3.1 | EPSS0.677% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28439HIGH | Windows TCP/IP Driver Denial of Service VulnerabilityWindows TCP/IP Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-28319. Apr 13, 2021 | CVSS7.5v3.1 | EPSS6.11% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28437MEDIUM | Windows Installer Information Disclosure VulnerabilityWindows Installer Information Disclosure Vulnerability Apr 13, 2021 | CVSS5.5v3.1 | EPSS0.76% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-28435MEDIUM | Windows Event Tracing Information Disclosure VulnerabilityWindows Event Tracing Information Disclosure Vulnerability Apr 13, 2021 | CVSS5.5v3.1 | EPSS0.76% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |