Microsoft Windows Server vulnerabilities

273 CVEs affecting Microsoft Windows Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-29151, published 2022-05-10.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-21907, published 2022-01-11. Critical severity, CVSS 9.8. EPSS: 92.8% chance of exploitation in the next 30 days. HTTP Protocol Stack Remote Code Execution Vulnerability
• CVE-2022-21972, published 2022-05-10. High severity, CVSS 8.1. EPSS: 79.3% chance of exploitation in the next 30 days. Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
• CVE-2022-26937, published 2022-05-10. Critical severity, CVSS 9.8. EPSS: 76% chance of exploitation in the next 30 days. Windows Network File System Remote Code Execution Vulnerability
• CVE-2022-23270, published 2022-05-10. High severity, CVSS 8.1. EPSS: 70.4% chance of exploitation in the next 30 days. Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
• CVE-2022-23253, published 2022-03-09. Medium severity, CVSS 6.5. EPSS: 56.4% chance of exploitation in the next 30 days. Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
• CVE-2021-26414, published 2021-06-08. Medium severity, CVSS 4.8. EPSS: 49.8% chance of exploitation in the next 30 days. Windows DCOM Server Security Feature Bypass
• CVE-2018-8420, published 2018-09-13. High severity, CVSS 8.8. EPSS: 48.9% chance of exploitation in the next 30 days. A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows…
• CVE-2022-21993, published 2022-02-09. High severity, CVSS 7.5. EPSS: 43.6% chance of exploitation in the next 30 days. Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
• CVE-2009-0230, published 2009-06-10. High severity, CVSS 9.0. EPSS: 34.9% chance of exploitation in the next 30 days. The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a…
• CVE-2022-24502, published 2022-03-09. Medium severity, CVSS 4.3. EPSS: 33.1% chance of exploitation in the next 30 days. Windows HTML Platforms Security Feature Bypass Vulnerability

Latest

• CVE-2022-29151, published 2022-05-10. High severity, CVSS 7.0. EPSS: 0.6% chance of exploitation in the next 30 days. Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
• CVE-2022-29150, published 2022-05-10. High severity, CVSS 7.0. EPSS: 0.6% chance of exploitation in the next 30 days. Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
• CVE-2022-29142, published 2022-05-10. High severity, CVSS 7.0. EPSS: 5.1% chance of exploitation in the next 30 days. Windows Kernel Elevation of Privilege Vulnerability
• CVE-2022-29141, published 2022-05-10. High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days. Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
• CVE-2022-29140, published 2022-05-10. Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days. Windows Print Spooler Information Disclosure Vulnerability
• CVE-2022-29139, published 2022-05-10. High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days. Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
• CVE-2022-29138, published 2022-05-10. High severity, CVSS 7.0. EPSS: 0.6% chance of exploitation in the next 30 days. Windows Clustered Shared Volume Elevation of Privilege Vulnerability
• CVE-2022-29137, published 2022-05-10. High severity, CVSS 8.8. EPSS: 2.5% chance of exploitation in the next 30 days. Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
• CVE-2022-29135, published 2022-05-10. High severity, CVSS 7.0. EPSS: 0.7% chance of exploitation in the next 30 days. Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
• CVE-2022-29134, published 2022-05-10. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Windows Clustered Shared Volume Information Disclosure Vulnerability