Known vulnerabilities in Windows Server 2019 1803

Vendor: Microsoft
Software: Windows Server
Version: 2019 1803
Software CPE: cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 2419
Public exploits: 118
Known exploited (KEV): 111
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Windows Server version 2019 1803 Windows Server 2019 1803 is affected by 2419 vulnerabilities: 26 critical, 434 high, 549 medium, 1410 low Critical High Medium Low

Vulnerabilities (2419)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105851 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-9491		 CWE-451 High
Public exploit available
Exploited
 2008 R2 6.1.7601.28021, 2008 6.0.6003.23624, 2012 R2 6.3.9600.22869, 2012 6.2.9200.25768, 2016 10.0.14393.8594, 2019 10.0.17763.8027, 2022 23H2 10.0.25398.1965, 2022 10.0.20348.4346, 2022 10.0.20348.4405, 2025 10.0.26100.7092, 2025 10.0.26100.7171 18.03.2025 SB2025031863
#VU95526 - Improper Access Control
CVE-2024-38202		 CWE-284 Low
No
No
 - 08.08.2024 SB2024080808
#VU95525 - Improper Access Control
CVE-2024-21302		 CWE-284 Low
No
No
 - 08.08.2024 SB2024080807
#VU88432 - Stack-based buffer overflow
CVE-2024-23593		 CWE-121 Low
No
No
 - 10.04.2024 SB2024041075
SB2025061025
#VU88431 - Stack-based buffer overflow
CVE-2024-23594		 CWE-121 Low
No
No
 - 10.04.2024 SB2024041075
SB2025061025
#VU88429 - Resource exhaustion
CVE-2024-26215		 CWE-400 Medium
No
No
 - 10.04.2024 SB2024041073
#VU88428 - Heap-based Buffer Overflow
CVE-2024-26229		 CWE-122 Low
Public exploit available
No
 - 10.04.2024 SB2024041072
#VU88427 - Authorization Bypass Through User-Controlled Key
CVE-2024-20665		 CWE-639 Low
No
No
 - 10.04.2024 SB2024041071
#VU88425 - Out-of-bounds read
CVE-2024-26172		 CWE-125 Low
No
No
 - 10.04.2024 SB2024041068
#VU88422 - Heap-based Buffer Overflow
CVE-2024-26214		 CWE-122 High
No
No
 - 10.04.2024 SB2024041065
#VU88421 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-26158		 CWE-59 Low
No
No
 - 10.04.2024 SB2024041064
#VU88419 - Improper input validation
CVE-2024-26253		 CWE-20 Low
No
No
 - 10.04.2024 SB2024041062
#VU88418 - Untrusted Pointer Dereference
CVE-2024-26252		 CWE-822 Low
No
No
 - 10.04.2024 SB2024041062
#VU88417 - Protection Mechanism Failure
CVE-2024-20669		 CWE-693 Low
No
No
 - 10.04.2024 SB2024041061
#VU88416 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2024-29062		 CWE-367 Medium
No
No
 - 10.04.2024 SB2024041061
#VU88415 - Improper input validation
CVE-2024-26189		 CWE-20 Medium
No
No
 - 10.04.2024 SB2024041061
#VU88414 - Stack-based buffer overflow
CVE-2024-28898		 CWE-121 Low
No
No
 - 10.04.2024 SB2024041061
#VU88413 - Protection Mechanism Failure
CVE-2024-28919		 CWE-693 Low
No
No
 - 10.04.2024 SB2024041061
#VU88412 - Stack-based buffer overflow
CVE-2024-20688		 CWE-121 Medium
No
No
 - 10.04.2024 SB2024041061
#VU88391 - Improper Access Control
CVE-2024-28922		 CWE-284 Low
No
No
 - 10.04.2024 SB2024041061


Showing elements 1 - 20 out of 2419