Microsoft Windows Server 20h2 — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Windows Server 20h2, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (52)

• CVE-2021-31166 — CVSS 9.8 (critical) — actively exploited: HTTP Protocol Stack Remote Code Execution Vulnerability
• CVE-2022-35744 — CVSS 9.8 (critical): Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
• CVE-2021-40444 — CVSS 8.8 (high) — actively exploited: <p>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware…
• CVE-2021-34527 — CVSS 8.8 (high) — actively exploited: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An…
• CVE-2021-33739 — CVSS 8.4 (high) — actively exploited: Microsoft DWM Core Library Elevation of Privilege Vulnerability
• CVE-2022-35752 — CVSS 8.1 (high): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2022-35753 — CVSS 8.1 (high): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2022-26925 — CVSS 8.1 (high) — actively exploited: Windows LSA Spoofing Vulnerability
• CVE-2022-35745 — CVSS 8.1 (high): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
• CVE-2021-36948 — CVSS 7.8 (high) — actively exploited: Windows Update Medic Service Elevation of Privilege Vulnerability
• CVE-2021-36955 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2021-40449 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2021-40450 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2021-41357 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2021-43226 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2022-35751 — CVSS 7.8 (high): Windows Hyper-V Elevation of Privilege Vulnerability
• CVE-2021-1732 — CVSS 7.8 (high) — actively exploited: Windows Win32k Elevation of Privilege Vulnerability
• CVE-2021-28310 — CVSS 7.8 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2022-35756 — CVSS 7.8 (high): Windows Kerberos Elevation of Privilege Vulnerability
• CVE-2021-31956 — CVSS 7.8 (high) — actively exploited: Windows NTFS Elevation of Privilege Vulnerability
• CVE-2021-31979 — CVSS 7.8 (high) — actively exploited: Windows Kernel Elevation of Privilege Vulnerability
• CVE-2021-33771 — CVSS 7.8 (high) — actively exploited: Windows Kernel Elevation of Privilege Vulnerability
• CVE-2021-34484 — CVSS 7.8 (high) — actively exploited: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2021-34486 — CVSS 7.8 (high) — actively exploited: Windows Event Tracing Elevation of Privilege Vulnerability
• CVE-2022-22047 — CVSS 7.8 (high) — actively exploited: Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
• CVE-2022-22718 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-24521 — CVSS 7.8 (high) — actively exploited: Windows Common Log File System Driver Elevation of Privilege Vulnerability
• CVE-2022-30190 — CVSS 7.8 (high) — actively exploited: A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An…
• CVE-2022-34713 — CVSS 7.8 (high) — actively exploited: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
• CVE-2022-35743 — CVSS 7.8 (high): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
• CVE-2022-35746 — CVSS 7.8 (high): Windows Digital Media Receiver Elevation of Privilege Vulnerability
• CVE-2022-35749 — CVSS 7.8 (high): Windows Digital Media Receiver Elevation of Privilege Vulnerability
• CVE-2022-35750 — CVSS 7.8 (high): Win32k Elevation of Privilege Vulnerability
• CVE-2022-21971 — CVSS 7.8 (high) — actively exploited: Windows Runtime Remote Code Execution Vulnerability
• CVE-2022-21999 — CVSS 7.8 (high) — actively exploited: Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2021-42278 — CVSS 7.5 (high) — actively exploited: Active Directory Domain Services Elevation of Privilege Vulnerability
• CVE-2022-35748 — CVSS 7.5 (high): HTTP.sys Denial of Service Vulnerability
• CVE-2021-36942 — CVSS 7.5 (high) — actively exploited: Windows LSA Spoofing Vulnerability
• CVE-2022-35755 — CVSS 7.3 (high): Windows Print Spooler Elevation of Privilege Vulnerability
• CVE-2022-35757 — CVSS 7.3 (high): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
• CVE-2022-26904 — CVSS 7.0 (high) — actively exploited: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2022-21882 — CVSS 7.0 (high) — actively exploited: Win32k Elevation of Privilege Vulnerability
• CVE-2022-21919 — CVSS 7.0 (high) — actively exploited: Windows User Profile Service Elevation of Privilege Vulnerability
• CVE-2022-35754 — CVSS 6.7 (medium): Unified Write Filter Elevation of Privilege Vulnerability
• CVE-2022-35759 — CVSS 6.5 (medium): Windows Local Security Authority (LSA) Denial of Service Vulnerability
• CVE-2022-35747 — CVSS 5.9 (medium): Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
• CVE-2022-35758 — CVSS 5.5 (medium): Windows Kernel Memory Information Disclosure Vulnerability
• CVE-2020-1472 — CVSS 5.5 (medium) — actively exploited: An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain…
• CVE-2021-31955 — CVSS 5.5 (medium) — actively exploited: Windows Kernel Information Disclosure Vulnerability
• CVE-2021-41379 — CVSS 5.5 (medium) — actively exploited: Windows Installer Elevation of Privilege Vulnerability
• CVE-2021-31201 — CVSS 5.2 (medium) — actively exploited: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability
• CVE-2021-31199 — CVSS 5.2 (medium) — actively exploited: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability